Bug#766670: Security fix without feature enhancement for 4.32.0 and 4.20.0

2014-11-23 Thread Henrique de Moraes Holschuh
On Sat, 22 Nov 2014, Charles Cazabon wrote: I hope Debian can simply accept the newer version of getmail; as I said, I try The next stable version of Debian (aka jessie) has getmail 4.46.0. We also have an official backports archive, and it will also have getmail 4.46.0 in a few days. This

Bug#766670: Security fix without feature enhancement for 4.32.0 and 4.20.0

2014-11-22 Thread Osamu Aoki
Hi, Thanks for your comment. (Charles is the upstream,) On Sat, Nov 22, 2014 at 01:30:41PM -0600, Charles Cazabon wrote: Osamu Aoki os...@debian.org wrote: In Debian, its security update policy prohibits any new feature added with security updates. It's kind of a bogus distinction.

Bug#766670: Security fix without feature enhancement for 4.32.0 and 4.20.0

2014-11-22 Thread Charles Cazabon
Osamu Aoki os...@debian.org wrote: On Sat, Nov 22, 2014 at 01:30:41PM -0600, Charles Cazabon wrote: As Linus Torvalds says, there's no real difference between bugfix and security fix, and I would argue there's almost as little difference between bugfix and new feature. If you added an

Bug#766670: Security fix without feature enhancement for 4.32.0 and 4.20.0

2014-11-21 Thread Osamu Aoki
(resent after subscribing with proper return path mail address) Hi, In Debian, its security update policy prohibits any new feature added with security updates. There are needs for updating 4.32.0 and 4.20.0 for the MITM security issues. CVE-2014-7273 CVE-2014-7274 CVE-2014-7275 I for one

Bug#766670: Security fix without feature enhancement for 4.32.0 and 4.20.0

2014-11-20 Thread Osamu Aoki
Hi, In Debian, its security update policy prohibits any new feature added with security updates. There are needs for updating 4.32.0 and 4.20.0 for the MITM security issues. CVE-2014-7273 CVE-2014-7274 CVE-2014-7275 I for one as being its maintainer in Debian see it possible but am scared