[From nobody Sat Jun 27 07:51:05 2026 Received: (at 1031046-done) by bugs.debian.org; 27 Jun 2026 06:50:27 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-15.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER, PGPSIGNATURE,SPF_HELO_PASS,SPF_PASS,X_DEBBUGS_CC autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 28; hammy, 149; neutral, 61; spammy, 1. spammytokens:0.916-+--Website hammytokens:0.000-+--bookworm, 0.000-+--H*ct:application, 0.000-+--H*ct:protocol, 0.000-+--H*ct:micalg, 0.000-+--H*ct:signed Return-path: <dr@jones.dk> Received: from graograman.jones.dk ([87.104.249.100]:34814 helo=xayide.jones.dk) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <dr@jones.dk>) id 1wdMrx-00BpTU-1b for 1031046-done@bugs.debian.org; Sat, 27 Jun 2026 06:50:27 +0000 Received: from localhost (localhost [127.0.0.1]) by xayide.jones.dk (Postfix) with ESMTP id 92219309A for <1031046-done@bugs.debian.org>; Sat, 27 Jun 2026 08:50:21 +0200 (CEST) Received: from xayide.jones.dk ([127.0.0.1]) by localhost (xayide.jones.dk [127.0.0.1]) (amavis, port 10024) with LMTP id xZ5GHGPQCrrR for <1031046-done@bugs.debian.org>; Sat, 27 Jun 2026 08:50:20 +0200 (CEST) Received: from localhost (unknown [192.168.222.33]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by xayide.jones.dk (Postfix) with ESMTPSA id EB53A1A9B for <1031046-done@bugs.debian.org>; Sat, 27 Jun 2026 08:50:19 +0200 (CEST) Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="===============1234760616118481115==" MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <167605856754.115747.7672008336305256671.reportbug@hullmann.westfalen.local> References: <167605856754.115747.7672008336305256671.reportbug@hullmann.westfalen.local> Subject: Re: Bug#1031046: Only include in Bookworm with commitment to stable updates From: Jonas Smedegaard <jonas@jones.dk> X-Debbugs-Cc: Moritz Muehlenhoff <jmm@debian.org> To: 1031046-done@bugs.debian.org Reply-To: 1031046@bugs.debian.org Date: Sat, 27 Jun 2026 08:50:18 +0200 Message-ID: <178254301892.2845312.8372524206656346742@cairon.jones.dk> User-Agent: alot/0.12 --===============1234760616118481115== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Quoting Moritz Muehlenhoff (2023-02-10 20:49:27) > Source: asterisk > Version: 1:20.1.0~dfsg+~cs6.12.40431414-1 > Severity: serious >=20 > Asterisk should only be included in Bookworm with a reliable commitment > by the maintainers to backport/test security fixes across the typical > three year life cycle (two years of stable-security and one year of > oldstable-security). (There have been 37 CVEs in 2021/2022) As Moritz has pointed out privately as part of his great work tracking CVEs, Asterisk now has no open CVEs. There has been interest in stable releases from several people, and Chris has stepped up as maintainer, so this issue is now considered solved. We can still use more people to care for backporting security fixes for stable releases once those emerge again, so please, anyone interested in helping out with that please add yourselves to the (misleadingly named) "Uploaders" field in the control file for the package. You need not be an official Debian developer to do so, you just need the skills of patching, building and testing the Debian package and an interest in helping out. Kind regards, - Jonas --=20 * Jonas Smedegaard - idealist & Internet-arkitekt * Tlf.: +45 40843136 Website: http://dr.jones.dk/ * Sponsorship: https://ko-fi.com/drjones [x] quote me freely [ ] ask before reusing [ ] keep private --===============1234760616118481115== MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Description: signature Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii" -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAmo/cqcACgkQLHwxRsGg ASF0xA//S/IRMG28C4/hSEqs914sU6Il1/16yPors3LuJ4Ks5v0U68kWO3uuppUV Hrt8A8T3FXVwD55RWaHtVPrUITpN0cTkJUX/pA2Xwl1SJPL/MomlGiMswi6pcXiS a58Cv1TFQ1Qqsxp3hu62IWyOrweTNZ1H/n0oE7Ix7B1fZJk1cZ0uefuQrkOUN2us lfDU4JUzIoCZPZCp0puxS/YBor1mu7IxdG2kCgPTDD68lzkSpspjuXIOd0fGIrj7 Y2ub5b/K1emutAAPnuiYJuSGRoviREHNJm9yNnBizjRGo0XWx492qaHHVMJRpsf1 erFnEw9puTGIY1VMgmEByZVketSHAmXzPGkeBJkmh6pN2X+7n+Ctq/Ph4vuDd3QH kulfrtWhO+v941oI1P3J+SgCb8QXXarD614W1aKQA3Qv/fnEzIWbuA8a3dqz9+PY M6B3+Dx2Y6itDeYnCba1p+7jZHZkoculN07Yeu+XEWEouauTGWqI9SYM1fTU2AB3 Avs6COz/4i5I55eG3AcJorIjEjJkNlDYR13c2pDcp53OfrpH6IUMAF+y4RwVJEES chR5OIejNEDW61ezlZXQHxgP3nndSRH3tqycPTH6JjwdfAyhr05jTcvE//dMkjCe F29QT7zsoo7Hu2CHVQCekYpFo1TJiPmtPgDvsWBV9Hj07L4G2mk= =tG2O -----END PGP SIGNATURE----- --===============1234760616118481115==-- ]