[Secure-testing-commits] r22537 - doc

Salvatore Bonaccorso carnil at alioth.debian.org
Sat Jun 8 07:12:14 UTC 2013


Author: carnil
Date: 2013-06-08 07:12:14 +0000 (Sat, 08 Jun 2013)
New Revision: 22537

Modified:
   doc/narrative_introduction
Log:
Add paragraph about end-of-life packages


Modified: doc/narrative_introduction
===================================================================
--- doc/narrative_introduction	2013-06-07 21:39:46 UTC (rev 22536)
+++ doc/narrative_introduction	2013-06-08 07:12:14 UTC (rev 22537)
@@ -361,7 +361,23 @@
 Certain packages may get higher or lower rating than usual, based on
 their importance.
 
+end-of-life packages
+--------------------
 
+In some rare cases (i.e. webprowsers) security support for some packages
+needed to be stopped before the end of the regular security maintenance
+life cycle.
+
+Packages which are not anymore supported by the security team in a
+(old-stable release are marked with the end-of-life tag:
+
+CVE-2011-3973 (cavsdec.c in libavcodec in FFmpeg before 0.7.4 and 0.8.x before 0.8.3 ...)
+	{DSA-2336-1}
+	- libav 4:0.7.1-7 (bug #641478)
+	- ffmpeg <removed>
+	- ffmpeg-debian <end-of-life>
+
+
 NOTE and TODO entries
 ---------------------
 




More information about the Secure-testing-commits mailing list