Mr. Deslauriers, thank you for explaining. Just so I'm clear: Chromium
security fixes are NOT backported like you described as being done for
VLC. Instead, you simply update the version (hence, why it can cause
other problems/bugs). Don't you think it was a problem to leave security
Chromium is in the short list of microrelease exceptions that were
approved by the Tech Board, which is why it gets version-bumped, instead
of patch backports. See:
https://wiki.ubuntu.com/StableReleaseUpdates/MicroReleaseExceptions
Chromium is a universe-supported project, and as such, is
Is this also the case for the Ubuntu version of Chromium? The Universe
version of Chromium is stuck at 10.0.648.133 but there have been several
critical security updates since that version. Are you backporting the
security updates into the 133 version? For security reasons, should I
install the
Chromium in universe is getting security updates. Chromium got an
exception and new upstream releases will be introduces to stable
releases to fix security bugs.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.
Why is Universe still showing 133 version then? Shouldn't this version
have been updated a while ago? When I had the Universe version installed
version 204 had been out for weeks and I was still at 133. I'm just
trying to understand so I know if I'm doing something wrong.
--
You received this
The latest cromium-browser package in lucid is
10.0.648.133~r77742-0ubuntu0.10.04.1. You should ask the chromium-
browser maintainers when they update the package, and not ask the vlc
maintainers.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct
You said in your comment: Chromium in universe is getting security
updates. Chromium got an exception and new upstream releases will be
introduces to stable releases to fix security bugs.
If it is getting security updates, HOW? Are they being back ported?
10.0.648.133 is not the latest chromium
The reason why chromium is still at 10.0.648.133 is because the two
newer versions introduce a bug that causes user's saved passwords to be
lost. We were waiting on Google to fix the issue before updating our
stable releases so the update doesn't cause a regression for our users.
Unfortunately,
Security updates for Lucid's vlc are still being released. In fact,
there is an update coming out today.
We don't update package versions for security updates, we backport the fixes.
See:
https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures
** Visibility changed to: Public
** Changed in: vlc
