3 ms·
This happened before with 12.04 LTS. They never back-ported a newer version of OpenSSL.
by compuguy 10y ago
This happened before with 12.04 LTS. They never back-ported a newer version of OpenSSL.
- kbenson 10y agoI'm not sure if it's just poor wording, but that way you stated that makes it seem like you don't know what backporting is. Backporting[1] is not providing a newer version of the application/library in question, it's taking the fix and making it work on the older version. A cursory look at the Ubuntu security advisories page shows that they have back-ported OpenSSL for both 14.04 LTS and 12.04 LTS. There's one from a few weeks ago for both[2], and there are many more that have been done. 1: https://access.redhat.com/security/updates/backporting https://access.redhat.com/security/updates/backporting 2: https://www.ubuntu.com/usn/usn-3181-1/ https://www.ubuntu.com/usn/usn-3181-1/
- kikoreis 10y agoI noted above that the nomenclature is inconsistent between Ubuntu and RHEL. But you are right on the money with regards to the fix in precise.
- compuguy 10y agoI've seen ubuntu backport fixes and rarely backport packages from a newer Ubuntu/Debian release. As you said, the nomenclature for backport is confusing.