On Mon, Aug 25, 2003 at 09:04:08AM -0600, Jamin W. Collins wrote: > On Mon, Aug 25, 2003 at 10:19:55AM +0200, Sander Smeenk wrote: > > We've been over this in debian-security before. I fixed the 1.8.4 > > package once, it got rejected, and I tried to have 2.0.x installed in > > Stable, but ofcourse, you can't put a new upstream version in a > > released stable Debian. > > Actually that's not true, as an example I refer you to SSH.
A stunning example of what a terrible idea it is to do this. That update was forced due to conditions created by upstream, and caused a great deal of problems, created a lot of work for the security team, and caused downtime on many user systems. -- - mdz