Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #231252

Re: If some package have serious bug and fixed on unstable and testing release, how long it will be available on stable release?

Show all headers | View raw

On 28/01/2021 22:59, Robbi Nespu wrote:
> Hello everyone,
> I am curious something (as per title). I not sure whether to ask here 
> or on devel mail list.
>
> Yesterday on OFTC #debian, some guy ask about unfix CVE-2020-25681 to 
> CVE-2020-25687 for dnsmasq[1] package on stable release.
>
> I not using dnsmasq but I curious how and will it be backport to 
> stable on cases like this?
>
> Stable = 2.80-1 (vulnerable)
> Testing = 2.83-1 (fix)
> Unstable = 2.84-1 (fix)
>
> There is 2 revision gap between stable and testing, do the security 
> team will apply the fixes on 2.80-1 or will update the package rev up 
> to 2.83-1?
>
>
> 1. https://security-tracker.debian.org/tracker/source-package/dnsmasq
>
As a general rule, fixes are backported to the current version in stable.

If it's simply not possible or very costly, it might happen that a new 
version is introduced, but this is rare.

-- 
Programmers do it bit by bit.

Eduardo M KALINOWSKI
eduardo@kalinowski.com.br

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

If some package have serious bug and fixed on unstable and testing  release, how long it will be available on stable release? Robbi Nespu <robbinespu@gmail.com> - 2021-01-29 03:20 +0100
  Re: If some package have serious bug and fixed on unstable and  testing release, how long it will be available on stable release? Eduardo M KALINOWSKI <eduardo@kalinowski.com.br> - 2021-01-29 13:40 +0100
  Re: If some package have serious bug and fixed on unstable and  testing release, how long it will be available on stable release? Greg Wooledge <wooledg@eeg.ccf.org> - 2021-01-29 14:00 +0100
    Re: If some package have serious bug and fixed on unstable and  testing release, how long it will be available on stable release? Robbi Nespu <robbinespu@gmail.com> - 2021-01-30 06:10 +0100
      Re: If some package have serious bug and fixed on unstable and  testing release, how long it will be available on stable release? Greg Wooledge <wooledg@eeg.ccf.org> - 2021-02-01 14:00 +0100
  Re: If some package have serious bug and fixed on unstable and  testing release, how long it will be available on stable release? David Wright <deblis@lionunicorn.co.uk> - 2021-01-29 18:00 +0100
    Re: If some package have serious bug and fixed on unstable and  testing release, how long it will be available on stable release? Robbi Nespu <robbinespu@gmail.com> - 2021-01-30 06:50 +0100
      Re: If some package have serious bug and fixed on unstable and  testing release, how long it will be available on stable release? Ming <ming@pgp.cool> - 2021-01-30 13:10 +0100
      Re: If some package have serious bug and fixed on unstable and  testing release, how long it will be available on stable release? David Wright <deblis@lionunicorn.co.uk> - 2021-01-30 20:30 +0100

csiph-web