Felix Miata wrote:

L A Walsh composed on 2017-06-18 11:45 (UTC-0700): .

...

How could it be possible that a version prior to suse13.2 being released?

Leap is based on SLE. 42.1 had many packages backleveled from 13.2 that remain even in 42.3. Examine the wget changelog to see if the vulnerabilities remain.

Thanks. If I may ask: where are the new stable versions? Somehow going to versions before 13.2 seems weird. Where is SLE at in relation to opensuse versions? 13.1? This seems really weird. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

Patrick Shanahan wrote:

* L A Walsh [06-18-17 15:22]:

...

Thanks. If I may ask: where are the new stable versions? Somehow going to versions before 13.2 seems weird. Where is SLE at in relation to opensuse versions? 13.1? This seems really weird.

no, Leap is based on SLE. 42.2 would compare to SLE aiui

Is that only on Thursdays? or alternate Wednesdays? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

* L A Walsh [06-19-17 00:47]:

Patrick Shanahan wrote:

...

* L A Walsh [06-18-17 15:22]:

...

Thanks. If I may ask: where are the new stable versions? Somehow going to versions before 13.2 seems weird. Where is SLE at in relation to opensuse versions? 13.1? This seems really weird.

no, Leap is based on SLE. 42.2 would compare to SLE aiui Is that only on Thursdays? or alternate Wednesdays?

alternate second Tuesdays of each week. -- (paka)Patrick Shanahan Plainfield, Indiana, USA @ptilopteri http://en.opensuse.org openSUSE Community Member facebook/ptilopteri Registered Linux User #207535 @ http://linuxcounter.net Photos: http://wahoo.no-ip.org/piwigo paka @ IRCnet freenode -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

On Mon, Jun 19, 2017 at 02:12:28AM -0400, Felix Miata wrote:

...

...

Leap is based on SLE. 42.1 had many packages backleveled from 13.2 that remain even in 42.3. Examine the wget changelog to see if the vulnerabilities remain. . Thanks. If I may ask: where are

Felix Miata wrote: . the new stable versions? Somehow going to versions before 13.2 seems weird. . Where is SLE at in relation to opensuse versions? 13.1?. If you want to know how this happened, search the opensuse-factory archives for

L A Walsh composed on 2017-06-18 12:22 (UTC-0700): . the Stephan Kulow and/or Ludwig Nussel posts that explained how something like 1/3 of openSUSE packages were to come directly from SLE, the rest not, back around the time that Leap acquired its name, before 42.1 was released.

... see above explanations. Note that "old" versions are not necessary a security problem, as we backport all security fixes. Ciao, Marcus -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

L A Walsh wrote:

Marcus Meissner wrote:

...

Note that "old" versions are not necessary a security problem, as we backport all security fixes. Ouch... that seems like a growing task of backporting... ug.

What release(s) contain the newer stuff?

I usually try to work from suse rpms even if I need a newer version. And then try to keep changes in rpms locally... (Have to try to tame the chaos somehow)...

What I do in such cases is to get the source rpm from Tumbleweed and compile that using rpmbuild. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org