Re: will Release come back for testing/updates at security.debian.org?

2019-07-08 Thread songbird
Andrei POPESCU wrote:
> On Du, 07 iul 19, 08:23:59, songbird wrote:
>>   with the change to testing the past day the error message pops up:
>>=20
>> E: The repository 'http://security.debian.org/debian-security testing/upd=
> ates Release' no longer has a Release file.
>
> Not sure why you even have 'security' for testing in your sources.list=20
> as all security updates migrate from unstable.
>
> https://www.debian.org/security/faq#testing

  i'm sure it is there because at some point someone said
to pick up security updates to testing that way.  i don't
normally follow a lot of packages in unstable or stable.

  if i understand the information on that page correctly
it implies that security updates come via unstable but
what about those done by the security team for packages
in testing and during freezes?  just in case someone 
does poke something to that repository in testing i'd 
like to pick it up when it happens.

  if it never happens then that repository should be
removed IMO.


  songbird



Re: will Release come back for testing/updates at security.debian.org?

2019-07-08 Thread Dave Sherohman
On Mon, Jul 08, 2019 at 11:54:01AM +0300, Andrei POPESCU wrote:
> On Lu, 08 iul 19, 03:10:53, Dave Sherohman wrote:
> > On Sun, Jul 07, 2019 at 03:22:40PM +0200, Salvatore Bonaccorso wrote:
> > > That will be actually a permanent change, see
> > > https://lists.debian.org/debian-security/2019/06/msg00015.html . The
> > > intention was actually do to it already in earlier cycle, but was not
> > > possible (cf.
> > > https://lists.debian.org/debian-security/2015/12/msg00015.html).
> > 
> > What was the intended method for people upgrading from pre-buster
> > versions to find out about this change?  Just wait for them to try to do
> > an update, get an error message, and hope that they ask on the mailing
> > list instead of just commenting out the security updates line?
>  
> Testing users are supposed to be able to handle such breakage.
> 
> When bullseye becomes stable this will most likely be documented in the 
> Release Notes.

Ah, ok, thanks.  I guess I wasn't following the thread properly and I
was thinking this change was happening in buster, not bullseye.  My
mistake; sorry about that.

-- 
Dave Sherohman



Re: will Release come back for testing/updates at security.debian.org?

2019-07-08 Thread Andrei POPESCU
On Lu, 08 iul 19, 03:10:53, Dave Sherohman wrote:
> On Sun, Jul 07, 2019 at 03:22:40PM +0200, Salvatore Bonaccorso wrote:
> > That will be actually a permanent change, see
> > https://lists.debian.org/debian-security/2019/06/msg00015.html . The
> > intention was actually do to it already in earlier cycle, but was not
> > possible (cf.
> > https://lists.debian.org/debian-security/2015/12/msg00015.html).
> 
> What was the intended method for people upgrading from pre-buster
> versions to find out about this change?  Just wait for them to try to do
> an update, get an error message, and hope that they ask on the mailing
> list instead of just commenting out the security updates line?
 
Testing users are supposed to be able to handle such breakage.

When bullseye becomes stable this will most likely be documented in the 
Release Notes.

> Perhaps an announcement on debian-security-announce (and perhaps also on
> debian-user) would be in order?  Ideally one with a "PAY ATTENTION! THIS
> IS IMPORTANT!"-type subject line to minimize the chance of people
> missing it.

In my understanding debian-security-announce is only for stable security 
updates. There is a debian-testing-security-announce list, last post in 
Feb.2011:
https://lists.debian.org/debian-testing-security-announce/2011/02/msg3.html

Apparently all security updates since have been handled via unstable.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: will Release come back for testing/updates at security.debian.org?

2019-07-08 Thread Andrei POPESCU
On Du, 07 iul 19, 08:23:59, songbird wrote:
>   with the change to testing the past day the error message pops up:
> 
> E: The repository 'http://security.debian.org/debian-security testing/updates 
> Release' no longer has a Release file.

Not sure why you even have 'security' for testing in your sources.list 
as all security updates migrate from unstable.

https://www.debian.org/security/faq#testing

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature


Re: will Release come back for testing/updates at security.debian.org?

2019-07-08 Thread Dave Sherohman
On Sun, Jul 07, 2019 at 03:22:40PM +0200, Salvatore Bonaccorso wrote:
> That will be actually a permanent change, see
> https://lists.debian.org/debian-security/2019/06/msg00015.html . The
> intention was actually do to it already in earlier cycle, but was not
> possible (cf.
> https://lists.debian.org/debian-security/2015/12/msg00015.html).

What was the intended method for people upgrading from pre-buster
versions to find out about this change?  Just wait for them to try to do
an update, get an error message, and hope that they ask on the mailing
list instead of just commenting out the security updates line?

Perhaps an announcement on debian-security-announce (and perhaps also on
debian-user) would be in order?  Ideally one with a "PAY ATTENTION! THIS
IS IMPORTANT!"-type subject line to minimize the chance of people
missing it.

-- 
Dave Sherohman



Re: will Release come back for testing/updates at security.debian.org?

2019-07-07 Thread Salvatore Bonaccorso
Hi,

On Sun, Jul 07, 2019 at 09:06:29AM -0400, songbird wrote:
> Dan Purgert wrote:
> > songbird wrote:
> >>   with the change to testing the past day the error message pops up:
> >>
> >> E: The repository 'http://security.debian.org/debian-security
> >> testing/updates Release' no longer has a Release file.
> >>
> >>   is this a temporary glitch or a permanent change?
> >
> > Given that Buster (formerly testing) moved to stable on July 6th, its
> > probably temporary until Bullseye picks up some security patches.
> 
>   that's what i was hoping...  :)

That will be actually a permanent change, see
https://lists.debian.org/debian-security/2019/06/msg00015.html . The
intention was actually do to it already in earlier cycle, but was not
possible (cf.
https://lists.debian.org/debian-security/2015/12/msg00015.html).

Hope this helps,

Regards,
Salvatore



Re: will Release come back for testing/updates at security.debian.org?

2019-07-07 Thread songbird
Dan Purgert wrote:
> songbird wrote:
>>   with the change to testing the past day the error message pops up:
>>
>> E: The repository 'http://security.debian.org/debian-security
>> testing/updates Release' no longer has a Release file.
>>
>>   is this a temporary glitch or a permanent change?
>
> Given that Buster (formerly testing) moved to stable on July 6th, its
> probably temporary until Bullseye picks up some security patches.

  that's what i was hoping...  :)


  songbird



Re: will Release come back for testing/updates at security.debian.org?

2019-07-07 Thread Dan Purgert
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

songbird wrote:
>   with the change to testing the past day the error message pops up:
>
> E: The repository 'http://security.debian.org/debian-security
> testing/updates Release' no longer has a Release file.
>
>   is this a temporary glitch or a permanent change?

Given that Buster (formerly testing) moved to stable on July 6th, its
probably temporary until Bullseye picks up some security patches.


-BEGIN PGP SIGNATURE-

iQEzBAEBCAAdFiEEBcqaUD8uEzVNxUrujhHd8xJ5ooEFAl0h6r4ACgkQjhHd8xJ5
ooFFsAgApUQ4Tki5A4CuqNmxLVOoREb4Hgq0r7cDSHJqNbX+9Fzv86cSmGobnRXo
dbVmUgOqKpd9QkXRduzQ/lkhIEqLqSgGI3l7oRy2GLQFuBg3bo/YSJXtZEXAz2it
I1mvCxADCtxFVkA0fwDBAh6Pgjs9ul7l1nT9GTHUTsZjaZagcOvJV/YCqqjm+JYg
IL82Cy6tQaTTVnhr289RkFlTAZX+FbBxL54ILq4JxutGuRx2jAS9dP6lded0uPR5
XIM19nDW57Go6uysOUyTgfLIaCojMBvBaHmg+qiMBvS5x+qkPRbDZyXEPZTcspGg
KwMsun+gRNqYuHSgIzZDwlricvJqMw==
=VHSc
-END PGP SIGNATURE-

-- 
|_|O|_| 
|_|_|O| Github: https://github.com/dpurgert
|O|O|O| PGP: 05CA 9A50 3F2E 1335 4DC5  4AEE 8E11 DDF3 1279 A281



will Release come back for testing/updates at security.debian.org?

2019-07-07 Thread songbird
  with the change to testing the past day the error message pops up:

E: The repository 'http://security.debian.org/debian-security testing/updates 
Release' no longer has a Release file.

  is this a temporary glitch or a permanent change?

  thanks!


  songbird