Thanks for taking the time, but ... On 12.01.2018 12:04, Joshua Colp wrote:
>> Could this be one of the rare cases where 13 and 15 needed security >> fixes, but 14 didn't? > > These are normal bug fix releases, not security releases. As such 14 did not > receive a release. > Interesting. The announcements for 13.19.0 and 15.2.0 you have made here both list all issues which have been fixed in the section "Bugs fixed in this release". However, ASTERISK-27480 ASTERISK-27452 ASTERISK-27337 ASTERISK-27319 seem to be security related (according to the short explanation texts in the announcements) and have been fixed both in 15.2.0 and 13.19.0. I am wondering why 14 does not suffer from them, or -if it suffers from them- why they are not considered security related there. I highly respect your work and don't want to steal your time since I have probably seriously misunderstood something, but could you please shortly explain what the string "Security: " (aka "(Security)" and with other wordings) at the beginning of the short explanation text for an issue exactly means? Thank you very much, Binarus -- _____________________________________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- Check out the new Asterisk community forum at: https://community.asterisk.org/ New to Asterisk? Start here: https://wiki.asterisk.org/wiki/display/AST/Getting+Started asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users