I'm a security minded person, normally I want to make sure most of the software packages that I use in my operating system stays secure.
Now, suppose there is a package called "sunshine" installed in my system(through apt of course), and have a vulnerable version 8.70
, the ubuntu security advisory tells me 9.10
is the last version vulnerable, but after I do apt-get install --only-upgrade
, I still have "sunshine" at a vulnerable version number ( below 9.10
).
This is pretty insecure, right? I found this post which says they don't update newer version of software on system's repository after a version of Ubuntu was officially released. However, that post was old, is this still true?