Your message dated Sat, 27 Jun 2026 08:50:18 +0200
with message-id <[email protected]>
and subject line Re: Bug#1031046: Only include in Bookworm with commitment to
stable updates
has caused the Debian Bug report #1031046,
regarding Only include in Bookworm with commitment to stable updates
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1031046: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1031046
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: asterisk
Version: 1:20.1.0~dfsg+~cs6.12.40431414-1
Severity: serious
Asterisk should only be included in Bookworm with a reliable commitment
by the maintainers to backport/test security fixes across the typical
three year life cycle (two years of stable-security and one year of
oldstable-security). (There have been 37 CVEs in 2021/2022)
Cheers,
Moritz
--- End Message ---
--- Begin Message ---
Quoting Moritz Muehlenhoff (2023-02-10 20:49:27)
> Source: asterisk
> Version: 1:20.1.0~dfsg+~cs6.12.40431414-1
> Severity: serious
>
> Asterisk should only be included in Bookworm with a reliable commitment
> by the maintainers to backport/test security fixes across the typical
> three year life cycle (two years of stable-security and one year of
> oldstable-security). (There have been 37 CVEs in 2021/2022)
As Moritz has pointed out privately as part of his great work tracking
CVEs, Asterisk now has no open CVEs.
There has been interest in stable releases from several people, and
Chris has stepped up as maintainer, so this issue is now considered
solved.
We can still use more people to care for backporting security fixes for
stable releases once those emerge again, so please, anyone interested
in helping out with that please add yourselves to the (misleadingly
named) "Uploaders" field in the control file for the package. You need
not be an official Debian developer to do so, you just need the skills
of patching, building and testing the Debian package and an interest in
helping out.
Kind regards,
- Jonas
--
* Jonas Smedegaard - idealist & Internet-arkitekt
* Tlf.: +45 40843136 Website: http://dr.jones.dk/
* Sponsorship: https://ko-fi.com/drjones
[x] quote me freely [ ] ask before reusing [ ] keep private
signature.asc
Description: signature
--- End Message ---
