<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <p>Update: the major upgrade was intentional.
      <a class="moz-txt-link-freetext" href="https://lists.debian.org/debian-lts/2023/07/msg00028.html">https://lists.debian.org/debian-lts/2023/07/msg00028.html</a></p>
    <p>I think rebuilding guam based on the Debian security version of
      Erlang is the most responsible choice. Even if something like this
      happens again in the future it might be better that things break
      than that we keep security vulnerabilities.</p>
    <p>Best,</p>
    <p>Lennart<br>
    </p>
    <div class="moz-cite-prefix">On 17-07-2023 15:36, Lennart Ackermans
      wrote:<br>
    </div>
    <blockquote type="cite"
      cite="mid:6b84e1a06e239bd2bf78edf7664c5d36@ackermans.ch">
      <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
      <p><br>
      </p>
      <p><br>
      </p>
      <p id="v1reply-intro">On 2023-07-17 07:12, Christian Mollekopf
        wrote:</p>
      <blockquote type="cite" style="padding: 0 0.4em; border-left:
        #1010ff 2px solid; margin: 0">
        <div class="v1pre"><br>
          I'd rather have it bundled than wake up to our packages no
          longer starting because the upstream erts package changed, so
          for unbundling we need to figure which erts version to pin
          first IMO.<br>
          <br>
        </div>
      </blockquote>
      <div class="v1pre"> </div>
      <div class="v1pre">Major updates like this recent erlang security
        update normally don't happen on stable Debian releases. The
        erlang package maintainer thinks this was probably a mistake by
        the Debian LTS team (email communication). If it is, it might be
        reverted. If it was intentional, that's a strange decision and
        probably not something that will be repeated. To be sure I asked
        on the Debian LTS mailing list. Should appear here: <a
          href="https://lists.debian.org/debian-lts/2023/07/threads.html"
          moz-do-not-send="true" class="moz-txt-link-freetext">https://lists.debian.org/debian-lts/2023/07/threads.html</a>.</div>
      <div class="v1pre"> </div>
      <div class="v1pre">Best,</div>
      <div class="v1pre">Lennart</div>
      <br>
      <fieldset class="moz-mime-attachment-header"></fieldset>
      <pre class="moz-quote-pre" wrap="">_______________________________________________
devel mailing list
<a class="moz-txt-link-abbreviated" href="mailto:devel@lists.kolab.org">devel@lists.kolab.org</a>
<a class="moz-txt-link-freetext" href="https://lists.kolab.org/mailman/listinfo/devel">https://lists.kolab.org/mailman/listinfo/devel</a></pre>
    </blockquote>
  </body>
</html>