Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.security > #4387

Re: [SECURITY] [DSA 3389-1] elasticsearch end-of-life

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

 ❦  1 novembre 2015 23:22 +0100, Moritz Muehlenhoff <jmm@debian.org> :

> Security support for elasticsearch in jessie is hereby discontinued. The
> project no longer releases information on fixed security issues which
> allow backporting them to released versions of Debian and actively
> discourages from doing so.
>
> elasticsearch will also be removed from Debian stretch (the next stable
> Debian release), but will continue to remain in unstable and available
> in jessie-backports.

There are many tradeoffs recently with projects that do not want to
provide a sensible security track for stable releases:

 - always package the latest release (Chromium)
 - always package the latest release of an upstream stable branch (MySQL)
 - always package the latest release through backports (without using testing)

I suppose that the first two options are to be negotiated with the
release team. Is the last option open to any package or does it need to
be negotiated with the FTP masters?
-- 
Make input easy to prepare and output self-explanatory.
            - The Elements of Programming Style (Kernighan & Plauger)

Back to linux.debian.security | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Re: [SECURITY] [DSA 3389-1] elasticsearch end-of-life Vincent Bernat <bernat@debian.org> - 2015-11-02 00:10 +0100
  Re: [SECURITY] [DSA 3389-1] elasticsearch end-of-life Rhonda D'Vine <rhonda@deb.at> - 2015-11-02 10:00 +0100
  Re: [SECURITY] [DSA 3389-1] elasticsearch end-of-life Moritz Mühlenhoff <jmm@inutil.org> - 2015-11-02 20:10 +0100
    Re: [SECURITY] [DSA 3389-1] elasticsearch end-of-life Ansgar Burchardt <ansgar@debian.org> - 2015-11-03 09:40 +0100
      Re: [SECURITY] [DSA 3389-1] elasticsearch end-of-life Moritz Mühlenhoff <jmm@inutil.org> - 2015-11-04 18:40 +0100
    Re: [SECURITY] [DSA 3389-1] elasticsearch end-of-life Vincent Bernat <bernat@debian.org> - 2015-11-04 00:00 +0100
      Re: [SECURITY] [DSA 3389-1] elasticsearch end-of-life Moritz Mühlenhoff <jmm@inutil.org> - 2015-11-04 18:40 +0100

csiph-web