Re: [SECURITY] [DSA 1516-1] New dovecot packages fix privilege escalation

2008-03-15 Thread Stefan Denker
Hello, On Sat, Mar 15, 2008 at 12:29:19AM +0100, Florian Weimer wrote: Package: dovecot Vulnerability : privilege escalation Problem type : local ... For the old stable distribution (sarge), no updates are provided. We recommend that you consider upgrading to the stable

Re: Is oldstable security support duration something to be proud of?

2008-03-15 Thread Javier Fernández-Sanguino Peña
On Mon, Mar 10, 2008 at 04:13:43PM -0400, Filipus Klutiero wrote: RHEL and derivatives: 7 years RHEL does offer support for 7 years, but that's paid-for support. Notice that you *cannot* use official RHEL updates without paying for it (up2date requires a paid subscription to Red Hat's Network).

Re: [SECURITY] [DSA 1516-1] New dovecot packages fix privilege escalation

2008-03-15 Thread Florian Weimer
* Stefan Denker: For the old stable distribution (sarge), no updates are provided. We recommend that you consider upgrading to the stable distribution. Would somebody then please update http://www.us.debian.org/News/2008/20080229.en.html to show that security support for sarge already