Jacob S wrote:

On Fri, 8 Oct 2004 23:13:15 +0200
"Dan Roozemond" <[EMAIL PROTECTED]> wrote:


While we're at it - suppose someone is the only administrator of a
debian(stable) system connected to the internet permanently, with SSH,
Postfix and Bind exposed to the 'big bad' world. Say that someone is
lucky enough to take a vacation, and is not able to connect to the
machine for two weeks. How dangerous is it to have 'apt-get update;
apt-get upgrade' ran automatically every day?

No, this scenario is not entirely hypothetically ;)



Well, let's just say that I wouldn't do it unless I were going to be looking for a new job while enjoying that 2 weeks of vacation. :-)

With Stable it should be rare for it to be a problem, for Sarge it
shouldn't be a problem very often, but there is still a chance for
problems in there somewhere.


That's how it should be. However, IIRC, all (most?) security bugs in packages
like ssh, bind, etc, were present both in testing and in stable.




--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Reply via email to