@Nikola M: of course one can download the source, the question is: will
it compile gracefully? I am sure you're aware of the dependency chains
that have to be satisfied in order to have a stable system. Sometimes
it's just not possible to have a newer version of software X without
updating chains
Are you serious? This bug has been present in Dapper for such a long
time, yet nobody cares to fix it. How can you call your LTS releases
'enterprise-ready' when this kind of monstrous vulnerabilities are left
unpatched for years?
--
vlc before 0.8.6c allows arbitrary code execution via a
I guess that's what you get for using a development process that
includes middlemen, such as the package maintainers. The fix exists,
it's been available upstream, yet people depend on a lazy package
maintainer to deliver the fix.
In Windows or MacOS X anyone can fix this issue by themselves, by
