On Sat, 22 Nov 2014, Rob van der Putten wrote: > A lot of bugs [1] but no Debian updates. Should I be concerned?
See: https://security-tracker.debian.org/tracker/source-package/asterisk > [1] For instance; > http://downloads.asterisk.org/pub/security/AST-2014-012.html AFAICT, this whole fleet of bugs was released two days ago, so it's not surprising that there isn't yet a fixed version in Debian or a DSA. [I'm not sure if these were released on the vendorsec list, so there might not have been any pre-release patch time.] That said, I'm certain that the maintenance team behind the Debian asterisk packages would love additional help in preparing tested patches which fix these issues in squeeze, wheezy, jessie, and unstable. -- Don Armstrong http://www.donarmstrong.com Il semble que la perfection soit atteinte non quand il n'y a plus rien a ajouter, mais quand il n'y a plus rien a retrancher. (Perfection is apparently not achieved when nothing more can be added, but when nothing else can be removed.) -- Antoine de Saint-Exupe'ry, Terres des Hommes -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/20141123011142.ge4...@teltox.donarmstrong.com