On Sat, 2015-08-08 at 20:11 +0200, Markus Frosch wrote: > Hi Gianfranco, > thanks for your summary. > > Although I'm not involved in maintaining virtualbox, still a few > thoughts: > > * What would that mean for Jessie updates? > * Isn't that basically the same problem we have with MySQL, > or even Iceweasel? > > So I think the question is either drop, or work with upstream > releases, > from which I'd personally prefer.
Not sure about MySQL, but for Iceweasel, is it really like that ? From what I've known, there were trademark issues which led to the rebranding. I'm not sure how they handle vulnerabilities. But their release strategy is: ESR and Regular releases. Every security fix goes into the next Regular release, and also the ESR release. ESR is supported until the next ESR (31 => 38). So usually the Debian Mozilla team prefers the ESR branch for Debian stable. With VBox, they don't have an ESR model. -- Ritesh Raj Sarraf | http://people.debian.org/~rrs Debian - The Universal Operating System
signature.asc
Description: This is a digitally signed message part