Precedence: list
MIME-Version: 1.0
Date: Wed, 23 Mar 2016 14:55:29 -0300
Message-ID: <CAKXJ0=i57cR-9ORP2=A-_c0nQPR17twKULskqVQL3Lwo_JuPLg@mail.gmail.com>
Subject: [alpine-user] How are security updates handled
From: Rodrigo Campos <rodrigo.campos@restorando.com>
To: alpine-user@lists.alpinelinux.org
Content-Type: text/plain; charset=UTF-8

Hi,

I'm interested in using alpine linux for docker containers, but I'm
not sure how security updates to packages are managed. I read the site
and wiki and didn't find it (but I might have missed something).

I see usually alpine linux releases are supported for more or less two
years, although  v3.3 seems to be 1.5 years[1]. Is it expected that
new releases are supported for 1.5 years? Or is there any written
policy that I can check and didn't find?

Also, how are security updates handled to any X package in an some
supported alpine linux release? If some package is not supported
upstream anymore, it's up to the alpine linux maintainer of the
package to back port the fix to the supported alpine linux release? Is
there an alpine linux security team? Or how is this handled? And
again, is there any written policy about this? :)




Thanks a lot,
Rodrigo


[1]: http://wiki.alpinelinux.org/wiki/Alpine_Linux:Releases


---
Unsubscribe:  alpine-user+unsubscribe@lists.alpinelinux.org
Help:         alpine-user+help@lists.alpinelinux.org
---