Re: frightening message

Quoting Albert Shih via Info <[email protected]>:

> Le 01/07/2025 à 08:22:58+0200, Jean Charles Delépine via Info a écrit
>> 3.10 is in testing and backports, 3.12 is in experimental. It seems to me
>
> In fact it's not even the «y» in the x.y.z, but the «z». I'm a little
> disappointed the z is old.
>
> I'm running everything in stable, so 3.6.1 who was release in Feb 2023.


> It's perfectly understandable to keep something like imap over a long time.
> But for me the «z» is for bugs fix, so in my mind it should be «easy» to
> have the upgrade.
>
> When I'm running FreeBSD I keep the same x.y during the 7 years of the
> hardware, but the z is quickly upgraded.
>
> But maybe I'm totally wrong.

In Debian stable security and importants patches are backported.

cyrus-imapd (3.6.1-4+deb12u3) bookworm; urgency=medium

   * Fix regression introduced in CVE-2024-34055 fix (Closes: #1075853)

  -- Yadd <[email protected]>  Mon, 29 Jul 2024 12:43:50 +0400

cyrus-imapd (3.6.1-4+deb12u2) bookworm-security; urgency=medium

   * Fix unbounded memory allocation (Closes: CVE-2024-34055)

  -- Yadd <[email protected]>  Wed, 05 Jun 2024 09:25:33 +0400

cyrus-imapd (3.6.1-4+deb12u1) bookworm; urgency=medium

   * Doc: add patch to fix minimal version needed before upgrade
     (see #1037346)
   * Fix postint version check (see #1037346)

  -- Yadd <[email protected]>  Wed, 06 Sep 2023 06:19:18 +0400

You are not running a Feb 2023 release, you are running a one year  
package with security and important patch backported. That's what you  
want when running Debian's stable.

If you need a missing important patch, just submit a bug and/or a  
tested patch.

If you need the new features, use backport.

If you need the new bugs, use testing, sid or experimental.

If you have special needs build your own package :
cyrus-imapd (3.8.4-1.3) UNRELEASED; urgency=medium

   * Non-maintainer upload.
   * Proxying uid search : official fix

  -- Jean Charles Delépine <[email protected]>  Tue, 03 Dec 2024  
14:02:08 +0100

cyrus-imapd (3.8.4-1.2) UNRELEASED; urgency=medium

   * Non-maintainer upload.
   * fix_proxy_uid_search

  -- Jean Charles Delépine <[email protected]>  Sun, 17 Nov 2024  
10:15:20 +0100


         Jean Charles Delépine

-- 
Service systèmes et réseaux - DISI

Université de Picardie Jules Verne
5, rue du moulin neuf - 80000 Amiens


------------------------------------------
Cyrus: Info
Permalink: https://cyrus.topicbox.com/groups/info/T0c0e25e570f21952-M72a93d1045d64737c0a841d0
Delivery options: https://cyrus.topicbox.com/groups/info/subscription