No security update released for 10.04 Lucid

[Orien Madgwick]

According to the page http://people.canonical.com/~ubuntu-security/cve/2013/CVE-2013-6393.html security updates have been released for other Ubuntu releases but not 10.04 LTS Lucid. Lucid has been "ignored (reached end-of-life)". I believe this ignorance is in error.

This package is still supported in Lucid. Could an update please be released?

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Patrick Mylund Nielsen (patrickmn)]

Perhaps libyaml was assumed to be a desktop package, but it is definitely in use on many 10.04 LTS servers.

[Marc Deslauriers (mdeslaur)]

This package is no longer part of the supported package set on Ubuntu 10.04. It was only supported for 3 years, and was never part of the 5 year supported package set.

This is the list of packages supported for 5 years in Ubuntu 10.04:
http://bazaar.launchpad.net/~ubuntu-security/ubuntu-cve-tracker/master/view/head:/lucid-supported.txt

See the following for more information:

https://wiki.ubuntu.com/SecurityTeam/FAQ#Official%20Support

[Orien Madgwick (orien-madgwick)]

The apt-cache lists the package as supported for five years. This is very misleading!

$ apt-cache show libyaml-0-2 | grep Supported
Supported: 5y