了解 bash 的发布命名约定。哪个版本先发布,4.3.30 还是 4.3-11?

Understanding the release naming convention for bash. Which release came first, 4.3.30 or 4.3-11?

Bash 漏洞 CVE-2014-6271 据报告已在 Debian Jessie 的 4.3-11 版中修复。在 Debian Jessie 服务器上,我执行了命令 bash --version,它说版本是 4.3.30。此服务器是否容易受到 CVE-2014-6271 的攻击?哪个版本先发布,4.3.30 还是 4.3-11?我怎么知道?

具体来说,我不了解发布命名约定以及 "-""." 的意义。

4.3.30 是 bash.

的一个版本

4.3-11 是 Jessie 中 bash Debian 软件包的版本,它是基于 bash 4.3.

创建的

所以 bash 4.3.30 在 Debian 软件包 4.3-11 中比 bash 更新。

破折号(-)后的部分版本称为debian_revision

来自the Debian Policy Manual

The version number of a package. The format is: [epoch:]upstream_version[-debian_revision].

upstream_version

This is the main part of the version number. It is usually the version number of the original (“upstream”) package from which the .deb file has been made, if this is applicable. Usually this will be in the same format as that specified by the upstream author(s); however, it may need to be reformatted to fit into the package management system’s format and comparison scheme.

debian_revision

This part of the version number specifies the version of the Debian package based on the upstream version. It may contain only alphanumerics and the characters + . ~ (plus, full stop, tilde) and is compared in the same way as the upstream_version is. It is optional;

The package management system will break the version number apart at the last hyphen in the string (if there is one) to determine the upstream_version and debian_revision. The absence of a debian_revision is equivalent to a debian_revision of 0.