u/ApertureNext

I have installed 'x' package, doesn't matter which as this is the case with many packages in the repository.

Using LTS, package versions are frozen and this is completely normal, but how do I tell if the package get security patches back-ported? For example doing 'x --version' will state an old version number which is vulnerable to multiple CVEs, but I just can't image a still support LTS would have vulnerable packages pushed to users.

So my question is, how do I tell if a package has security fixes back-ported? I cannot find an obvious answer.