Re: Package management and security

2007-06-08 Thread Andrew M.A. Cater
On Fri, Jun 08, 2007 at 09:56:09AM +0200, Frédéric PICA wrote: > Ok, so apt-get update/upgrade -y in a cron job will work but what about my > first question ? Don't do this :( The pace of change in Debian stable is very slow: as you correctly say, fixes are back ported and so on but it is still

Re: Package management and security

2007-06-08 Thread Mark Lanett
You want to use a combination of these commands at different times: apt-get -qq update # necessary, no email desired apt-get -dy upgrade # download minor updates, do not install, send email apt-get -yupgrade # install minor updates, send email apt-get -qqdy dist-upgrade #

Re: Package management and security

2007-06-08 Thread John Wright
The security team looks at the diffs for the patch to version 2 of the software, identifies the parts that fix the bug in version 1 and manually back port the bug fix to version 1. We end up with a Debian specific version that doesn¹t introduce new dependencies or features. This works with great su

Re: Package management and security

2007-06-08 Thread Frédéric PICA
Ok, so apt-get update/upgrade -y in a cron job will work but what about my first question ? Lets say debian stable has foo-1.0 package. I does apt-get upgrade -y in my cron job and one day I have foo-1.0 updated to foo-1.0.1 for bugfix reason. Meanwhile the author of foo release version 2, debian

Re: Package management and security

2007-06-07 Thread Bernhard R. Link
* [EMAIL PROTECTED] <[EMAIL PROTECTED]> [070607 16:21]: > > >I saw in 'man apt-get' that using apt-get upgrade does not install new > > >packages or remove an already installed package. > > >Is it possible that I did'nt get the latest security fixes using > > >apt-get upgade in a cron job ? > > afa

Re: Package management and security

2007-06-07 Thread Jens Schüßler
* Frédéric PICA <[EMAIL PROTECTED]> wrote: > Thanks for your answer, > > So I need to do an apt-get dist-upgrade in my cron job to be sure to always > have the latest security fixes ? > What's the risk to have a needed package uninstalled by that way ? You could use the package cron-apt for this,

Re: Package management and security

2007-06-07 Thread Riku Valli
Frédéric PICA wrote: Thanks for your answer, So I need to do an apt-get dist-upgrade in my cron job to be sure to always have the latest security fixes ? What's the risk to have a needed package uninstalled by that way ? My goal is to have the latest security fixes for a server, but I have t

Re: Package management and security

2007-06-07 Thread Frédéric PICA
Thanks for your answer, So I need to do an apt-get dist-upgrade in my cron job to be sure to always have the latest security fixes ? What's the risk to have a needed package uninstalled by that way ? My goal is to have the latest security fixes for a server, but I have to be sure that dist-upgra

Re: Package management and security

2007-06-07 Thread paddy
On Thu, Jun 07, 2007 at 05:14:53PM +0300, Riku Valli wrote: > Fr??d??ric PICA wrote: > >Greets, > > > >I saw in 'man apt-get' that using apt-get upgrade does not install new > >packages or remove an already installed package. > >Is it possible that I did'nt get the latest security fixes using > >

Re: Package management and security

2007-06-07 Thread Riku Valli
Frédéric PICA wrote: Greets, I saw in 'man apt-get' that using apt-get upgrade does not install new packages or remove an already installed package. Is it possible that I did'nt get the latest security fixes using apt-get upgade in a cron job ? I think particularly about security fixes that ca

Package management and security

2007-06-07 Thread Frédéric PICA
Greets, I saw in 'man apt-get' that using apt-get upgrade does not install new packages or remove an already installed package. Is it possible that I did'nt get the latest security fixes using apt-get upgade in a cron job ? I think particularly about security fixes that can't be retro-ported to t