Bug#913913: Bug#931524: security.debian.org: bullseye security updates may be silently skipped on systems using apt pinning

2020-07-09 Thread Piotr Engelking
Julian Andres Klode : > This seems the "best" outcome. In any case, we have about 2 years to > figure this out and should keep things this way for now. [...] > Anyhow, we've got two years to fix this, no need to rush a "fix" out > now. One year has passed without rushing a fix, or any other act

Bug#913913: Bug#931524: security.debian.org: bullseye security updates may be silently skipped on systems using apt pinning

2019-07-08 Thread Julian Andres Klode
On Mon, Jul 08, 2019 at 08:26:50AM +0200, Piotr Engelking wrote: > Julian Andres Klode : > > > > Now a=testing packages have higher priority than the a=testing-security > > > ones, which results in security updates not being installed. Another > > > method of pinning configuration, using APT::Defa

Bug#913913: Bug#931524: security.debian.org: bullseye security updates may be silently skipped on systems using apt pinning

2019-07-07 Thread Piotr Engelking
Julian Andres Klode : > > Now a=testing packages have higher priority than the a=testing-security > > ones, which results in security updates not being installed. Another > > method of pinning configuration, using APT::Default-Release, has > > exactly the same effect. > > And this is a good thing

Bug#913913: Bug#931524: security.debian.org: bullseye security updates may be silently skipped on systems using apt pinning

2019-07-07 Thread Julian Andres Klode
On Sun, Jul 07, 2019 at 05:23:01PM +0200, Julian Andres Klode wrote: > That means that testing-security does not work, as testing-security is > not testing and apt will complain. > > Ubuntu would use: > > Codename: bullseye > Suite: bullseye-security > > but that would not help you either for a=

Bug#913913: Bug#931524: security.debian.org: bullseye security updates may be silently skipped on systems using apt pinning

2019-07-07 Thread Julian Andres Klode
On Sun, Jul 07, 2019 at 04:59:03PM +0200, Piotr Engelking wrote: > Salvatore Bonaccorso : > > > I do not think this will be reverted, but time will show. There was > > already an earlier intention to do this to get consistency across the > > archive: > > > > https://lists.debian.org/debian-securit

Bug#913913: Bug#931524: security.debian.org: bullseye security updates may be silently skipped on systems using apt pinning

2019-07-07 Thread Piotr Engelking
Salvatore Bonaccorso : > I do not think this will be reverted, but time will show. There was > already an earlier intention to do this to get consistency across the > archive: > > https://lists.debian.org/debian-security/2015/12/msg00015.htm > > But back then this was not possible to switch. Then

Bug#913913: Bug#931524: security.debian.org: bullseye security updates may be silently skipped on systems using apt pinning

2019-07-07 Thread Salvatore Bonaccorso
Hi [reassigned the package to ftp.debian.org as while it affects security team, this is on the archive side] On Sun, Jul 07, 2019 at 09:30:13AM +0200, Piotr Engelking wrote: > Package: security.debian.org > Severity: normal > Tags: security > > With the release of buster, testing security update

Bug#931524: security.debian.org: bullseye security updates may be silently skipped on systems using apt pinning

2019-07-07 Thread Piotr Engelking
Package: security.debian.org Severity: normal Tags: security With the release of buster, testing security updates switched from Suite: testing to Suite: testing-security. This silently breaks security updates on systems using apt pinning to elevate the priority of testing packages. Also, bug #913