Re: Triage status for a few old packages

2023-04-06 Thread Sylvain Beucler
Hello Security Team, On 01/04/2023 21:31, Salvatore Bonaccorso wrote: First a disclaimer, this probably needs further discussion, reflects my current personal knowledge and view on the question, and further feedback is appreciated by at least one other persion in the Debian security team doing f

Re: Incomplete: intel-microcode (3.20230214.1~deb10u1) buster-security

2023-04-06 Thread Moritz Mühlenhoff
Am Wed, Apr 05, 2023 at 02:49:01PM +0200 schrieb Philipp Kern: > I suppose there has been a long-standing assumption that non-free does not > get security support, so non-free{,-firmware} is not actually autobuilt for > -security suites right now. And maintainers uploaded binaries manually with > t