On Sun July 1 2007 11:22:40 pm Adam Hupp wrote:
> (Sorry if you see this twice, but I never saw the first copy come
> through)
>
> Hello,
> I'm announcing a program I've written for notifying the administrator
> about necessary security updates on a Debian box. It'
(Sorry if you see this twice, but I never saw the first copy come
through)
Hello,
I'm announcing a program I've written for notifying the administrator
about necessary security updates on a Debian box. It's called Debian
Security Check (dsc.py).
Often it's not obvious that
Hello
Im trying to create a preseed file to network install some machines
using a FTP local mirror of debian & debian-security(mirrored on
192.168.2.1 and available via FTP only).
How do i choose the protocol for updates as being ftp?
I've tried
apt-setup/uri_type select ftp
On Mon, Apr 23, 2007 at 11:45:51AM -0400, Douglas Allan Tutty <[EMAIL
PROTECTED]> was heard to say:
> Yes, aptitude is the tool to use. However, if you read all the recent
> threads on aptitude you'll see that the _first_ time you use it, you
> need to get your options set (e.g. not including rec
On Mon, Apr 23, 2007 at 11:10:55AM -0400, Jan Sneep <[EMAIL PROTECTED]> was
heard to say:
> I'm a total newbie ... downloaded and successfully installed my very first
> Debian OS a month of so ago and thought I should try and make sure I have
> all the latest updates ... my preference is for using
o get positive feedback that all the
current security updates are in place? As I have never seen an asterisk in
three months, of any color on the tool bar, I'm assuming that something
hasn't been working properly?
I have ALWAYS done the standard stable install, NEVER complied or added ev
positive feedback that all the
current security updates are in place? As I have never seen an asterisk in
three months, of any color on the tool bar, I'm assuming that something
hasn't been working properly?
I have ALWAYS done the standard stable install, NEVER complied or added even
so
On Apr 23, 5:00 pm, "Jan Sneep" <[EMAIL PROTECTED]> wrote:
> Thanks Doug,
>
> But with all due respect ... it should be easier ... a lot easier! ...
> simple basic stuff, like getting the latest Security Updates, IMHO should be
> a no-brainer for the averag
Thanks Doug,
But with all due respect ... it should be easier ... a lot easier! ...
simple basic stuff, like getting the latest Security Updates, IMHO should be
a no-brainer for the average user and not require a System Administrator to
do ... :O(
I started out using PCs before Windows was even
omewhere can go wrong. The most recent
case was going wrong while checking for security updates.
Try this:
Install but don't select _any_ tasks, not even standard.
If that doesn't give you aptitude then do apt-get install
aptitude aptitude-doc.
Read the aptitu
... compared to this one. :O)
-Original Message-
From: Sam Leon [mailto:[EMAIL PROTECTED]
Sent: April 23, 2007 1:51 PM
To: debian-user@lists.debian.org
Cc: debian-user@lists.debian.org
Subject: Re: Newbie Aptitude Question about Security Updates
Jan Sneep wrote:
> It is just SOOO frustratin
Jan Sneep wrote:
It is just SOOO frustrating ... like now I can't get the OS to re-install ... have to use FDISK to delete the partitions, but it seems to remember the old info ... so have to first format the hard drive with a DOS partition and then try to re-install ... and it takes hours to do
1 PM
To: debian-user@lists.debian.org
Subject: Re: Newbie Aptitude Question about Security Updates
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Jan Sneep wrote:
> I could log in, but every command I could think of to try failed ... the
> only command that worked was "help" and
ed and then go get all the updates and install
> them?
>
>
> -Original Message-
> From: Douglas Allan Tutty [mailto:[EMAIL PROTECTED]
> Sent: April 23, 2007 11:46 AM
> To: debian-user@lists.debian.org
> Subject: Re: Newbie Aptitude Question about Security Updates
On Mon, Apr 23, 2007 at 12:22:57PM -0400, Jan Sneep wrote:
> I could log in, but every command I could think of to try failed ... the
> only command that worked was "help" and it didn't really provide any helpful
> advice ... so I've started to re-install the OS, this will be the 7th or 8th
> time
AIL PROTECTED]
Sent: April 23, 2007 11:46 AM
To: debian-user@lists.debian.org
Subject: Re: Newbie Aptitude Question about Security Updates
On Mon, Apr 23, 2007 at 11:10:55AM -0400, Jan Sneep wrote:
> Wanted to make sure I had all the latest Security & installed
> applications updates. Based
On Mon, Apr 23, 2007 at 11:10:55AM -0400, Jan Sneep wrote:
> Wanted to make sure I had all the latest Security & installed
> applications updates. Based on some recent threads on this list it looked
> like Aptitude was the tool to use.
>
> I'm a total newbie ... downloaded and successfully instal
anual ...
I hit a "u" to make sure I had the latest list of available updates ... made
sure the cursor was on "Security Updates" then hit "g" to install the
updates ... it showed me a list of updates and I hit "g" again to install
the updates ... after it dow
On 4/10/07, Mark Panen <[EMAIL PROTECTED]> wrote:
Hi
Is there any way to bypass the security repo retrival during install
as i did not have an internet connection when i installed Etch and apt
sat forever waiting going through the differnet security update urls ?
When installing on such a sys
Hi
Is there any way to bypass the security repo retrival during install
as i did not have an internet connection when i installed Etch and apt
sat forever waiting going through the differnet security update urls ?
Mark
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscri
On Mon, 2007-04-09 at 08:49 -0400, Tom Allison wrote:
> Failed to fetch ftp://ftp.us.debian.org/debian/dists/stable/Release.gpg Data
> socket timed out [IP: 128.101.240.212 21]
> Reading package lists... Done
> W: Conflicting distribution: http://security.debian.org stable/updates
> Release
> (
Failed to fetch ftp://ftp.us.debian.org/debian/dists/stable/Release.gpg Data
socket timed out [IP: 128.101.240.212 21]
Reading package lists... Done
W: Conflicting distribution: http://security.debian.org stable/updates Release
(expected stable but got etch)
W: You may want to run apt-get upda
On Tue, Feb 13, 2007 at 12:55:11PM -0800, onlineviewer wrote:
> Hello All,
>
> Is there a way to download and save all of the sarge security updates.
> I need to burn them to cd. I have a few machines which have no
> internet access, so i can not grab them with apt. Suggestions?
S
On 13 Feb 2007 12:55:11 -0800, onlineviewer <[EMAIL PROTECTED]> wrote:
Hello All,
Is there a way to download and save all of the sarge security updates.
I need to burn them to cd. I have a few machines which have no
internet access, so i can not grab them with apt. Suggestions?
apt-z
Hello All,
Is there a way to download and save all of the sarge security updates.
I need to burn them to cd. I have a few machines which have no
internet access, so i can not grab them with apt. Suggestions?
Thank you,
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of
ing that these systems are getting out-of-date and security
> updates are no longer available.
Updates were finished around June from the official announcment:
http://www.debian.org/News/2006/20060601
> Fedora solves this problem with the unoffical "Fedora Legacy" project;
Hello,
I have several Debian Woody systems that, for various reasons, are
inconvenient to update. I somehow misread Debian's support policy,
and though I had another year before support ended, but now I'm
finding that these systems are getting out-of-date and security
updates are
On Tue, Oct 24, 2006 at 12:30:06PM +0100, Ken Walker wrote:
> I'm getting a little confused about security updates
>
> I'm using Debian stable and daily do the apt-get update/upgrade.
>
> But when a package has a security update, do i have to start/stop specific
>
On Tue, 24 Oct 2006 12:30:06 +0100
Ken Walker <[EMAIL PROTECTED]> wrote:
> I'm getting a little confused about security updates
>
> I'm using Debian stable and daily do the apt-get update/upgrade.
>
> But when a package has a security update, do i have to sta
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 10/24/06 06:30, Ken Walker wrote:
> I'm getting a little confused about security updates
>
> I'm using Debian stable and daily do the apt-get update/upgrade.
>
> But when a package has a security update, do i ha
I'm getting a little confused about security updates
I'm using Debian stable and daily do the apt-get update/upgrade.
But when a package has a security update, do i have to start/stop specific
applications.
Like today, Python was updated due to a security fix.
Is there any applicat
Hi,
How can I pin security updates?
For the following sources.list:
deb http://security.debian.org/ sarge/updates main contrib non-free
I gave the following in /etc/apt/preferences, which doesn't seem to work.
// debian sarge security updates:
Package: *
Pin: release a=sarge/update
On 6/10/06, Dimitar Vukman <[EMAIL PROTECTED]> wrote:
On Sat, 10 Jun 2006 15:34:33 +0200
Philippe De Ryck <[EMAIL PROTECTED]> wrote:
> Maybe you can put together a little script to check for updates and
> notify you when there are updates pending. I don't know if something
> like this already ex
On Sat, 10 Jun 2006 15:34:33 +0200
Philippe De Ryck <[EMAIL PROTECTED]> wrote:
> Maybe you can put together a little script to check for updates and
> notify you when there are updates pending. I don't know if something
> like this already exists?
I believe cron-apt does this:
--
On Sat, 2006-06-10 at 15:18 +0200, Lubos Vrbka wrote:
> > Very good!
> > I will schedule upgrades with crontab plan.
> i think this is not very good idea. from time to time,
> apt/aptitude/dselect/whatever you will use needs human intervention
> during update/upgrade. an error can occur, or other
an error can occur, or other
> problems. imho, you should perform the update/upgrade personally.
>
With stable security updates, I'm not so worried. Still, Lubos has
a point. This is what should be in crontab:
#apt-get update && apt-get -y -d upgrade
This only *downloads* the
On Sat, 10 Jun 2006 12:35:01 +0100
Jerome BENOIT <[EMAIL PROTECTED]> wrote:
> Hello,
>
> currently, whereas everything was fine,
> I have some trouble with secure-testing.debian.net :
> deselect/update `Could not connect ... (connection timed out)'
>
> May be you have a similar issue:
> in this
Very good!
I will schedule upgrades with crontab plan.
i think this is not very good idea. from time to time,
apt/aptitude/dselect/whatever you will use needs human intervention
during update/upgrade. an error can occur, or other problems. imho, you
should perform the update/upgrade personall
added both repositories in sources.list, then apt-get update
> apt-get upgrade. All work fine, my doubt is how packages are
> updated... are there problems or likely dependencies conflicts using
> both repositories? Maybe is more desirable using only security
> updates? I've in
date
> apt-get upgrade. All work fine, my doubt is how packages are
> updated... are there problems or likely dependencies conflicts using
> both repositories? Maybe is more desirable using only security
> updates? I've installed apache,mysql,postfix and hylafax on some
> servers, I
g you?
- --
Ron Johnson, Jr.
Jefferson LA USA
I've added both repositories in sources.list, then apt-get update
apt-get upgrade. All work fine, my doubt is how packages are
updated... are there problems or likely dependencies conflicts using
both repositories? Maybe is more desirable using
Hello,
currently, whereas everything was fine,
I have some trouble with secure-testing.debian.net :
deselect/update `Could not connect ... (connection timed out)'
May be you have a similar issue:
in this case I guess it is better to just report in a few days
the operation.
hth,
Jerome
Ron John
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Michele Della Marina wrote:
> Hello!
> I use a stable ditribution on my servers, and periodically I make
> apt-get update and apt-get upgrade using security.debian.org in
> sources.list
> I think (as I know) that this operation updates the critical pac
Hello!
I use a stable ditribution on my servers, and periodically I make
apt-get update and apt-get upgrade using security.debian.org in
sources.list
I think (as I know) that this operation updates the critical packages
installed in my systems.
If I add a line in sources.list like ftp.debian.org/
Mike Dresser wrote:
On Mon, 8 May 2006, Piotr A. Dybczyñski wrote:
It seems something is going wrong with DNS.
security.debian.org points to 0.0.0.0 !!
Saw this yesterday, appears to be working properly today.
Nah, I tried to update an installation of Woody today; two packages
should hav
On Mon, 8 May 2006, Piotr A. Dybczy?ski wrote:
It seems something is going wrong with DNS.
security.debian.org points to 0.0.0.0 !!
Saw this yesterday, appears to be working properly today.
Mike
Piotr A. Dybczyński wrote:
> It seems something is going wrong with DNS.
> security.debian.org points to 0.0.0.0 !!
>
> Regards
> Piotr
I don't know if it points to 0.0.0.0, but it sure's taking a while to
connect to this server. For the last few days, it is taking from
anywhere between 5 to 60
On Mon, 2006-05-08 at 16:20 +0200, Piotr A. Dybczyński wrote:
> It seems something is going wrong with DNS.
> security.debian.org points to 0.0.0.0 !!
$ nslookup security.debian.org
Server: 131.212.174.193
Address:131.212.174.193#53
Name: security.debian.org
Address: 128.101.24
It seems something is going wrong with DNS.
security.debian.org points to 0.0.0.0 !!
Regards
Piotr
--
/
Dr Piotr A. Dybczynski, Astronomical Observatory, A.Mickiewicz University
Sloneczna 36,60-286 Poznan,POLAND,te
On Thu, Nov 10, 2005 at 04:51:40PM -0600, Hugo Vanwoerkom wrote:
> Has anybody heard of Sarge cd's *with* the security updates being sold
> by someone?
I'm not sure, but it won't be long until there is a sarge 3.1 r1
avaialble. Woody went up to r7 or so. I'm look
Hi,
Has anybody heard of Sarge cd's *with* the security updates being sold
by someone?
Thanks!
H
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
s. keeling schrieb:
During aptitude update; what's this mean and what do I do about it?
W: GPG error: http://secure-testing.debian.net \
etch-proposed-updates/security-updates Release: The following \
signatures couldn't be verified because the public key is not \
available:
During aptitude update; what's this mean and what do I do about it?
W: GPG error: http://secure-testing.debian.net \
etch-proposed-updates/security-updates Release: The following \
signatures couldn't be verified because the public key is not \
available: NO_PUBKEY 946AA6E18
On Sun, Sep 25, 2005 at 11:22:11PM +0100, Edd Dumbill wrote:
> On Sun, 2005-09-25 at 18:06 -0400, William Ballard wrote:
> > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=323365
> >
> > Why is this grave security bugfix not in Sarge security updates, more
> >
On Sun, 2005-09-25 at 18:06 -0400, William Ballard wrote:
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=323365
>
> Why is this grave security bugfix not in Sarge security updates, more
> than a month later? I know there's a "good reason," but in my few year
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=323365
Why is this grave security bugfix not in Sarge security updates, more
than a month later? I know there's a "good reason," but in my few years
of using Debian I have always run unstable.
What's the policy/urgen
Hello *,
On Tue, Sep 20, 2005 at 10:33:58AM -0400, Derek The Monkey Wueppelmann wrote:
> Quick question. What security update has caused a whole wack of X
> libraries to be updated? I have cron-apt running and this morning at
This is DSA-816 (not yet announced, currently pending).
> 4:00am nothi
Quick question. What security update has caused a whole wack of X
libraries to be updated? I have cron-apt running and this morning at
4:00am nothing needed updating, but now when I do an update on the same
system it wants to update a bunch of xlibs. Yet on debian.org/security/
nothing seems to hav
On Sun, Sep 18, 2005 at 11:27:24AM +0100, Clive Menzies wrote:
> dpkg -l | grep ii
also, dpkg --get-selections
--
Tom Vier <[EMAIL PROTECTED]>
DSA Key ID 0x15741ECE
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
On Sun, Sep 18, 2005 at 02:43:09PM +0200, Maurits van Rees wrote:
> On Sun, Sep 18, 2005 at 12:26:31PM +0300, Simo Kauppi wrote:
> > I would like to find out if I have more packages which would have a
> > newer version available but haven't been upgraded.
>
> Run apt-get update && apt-get upgrade.
> > The reason for asking is that I just accidentally noticed that
> > php4-common, libapache2-mod-php4 and php4-mysql had a newer version in
> > security-updates but they had not been automatically upgraded. Manually
> > installing the newer versions of those had no problem
On Sun, Sep 18, 2005 at 12:26:31PM +0300, Simo Kauppi wrote:
> I would like to find out if I have more packages which would have a
> newer version available but haven't been upgraded.
Run apt-get update && apt-get upgrade. [Or dist-upgrade instead of
upgrade or aptitude instead of apt-get, but th
ibapache2-mod-php4 and php4-mysql had a newer version in
> security-updates but they had not been automatically upgraded. Manually
> installing the newer versions of those had no problems.
>
> I would like to find out if I have more packages which would have a
> newer version av
security-updates but they had not been automatically upgraded. Manually
installing the newer versions of those had no problems.
I would like to find out if I have more packages which would have a
newer version available but haven't been upgraded.
I'm using Debian etch AMD64.
Simo
--
:r ~/
[Please include my email address in any replies.]
Hi Bob,
Thanks for your quick reply.
I would verify that you are really at Sarge already and that these
really are only security updates. As things download you can tell if
they are coming from sarge/updates or not. If you pick a package in
upgrades. However I
have been keeping current all along and so may not have a good idea of
the entire set size. But I am worried that you are really running
Woody and this upgrade is the amount of data while you are now
pointing to Sarge.
I would verify that you are really at Sarge already and that
[Please include my email address in any replies]
Hi Bob,
You want "apt-get upgrade". (Or "aptitude upgrade".)
Great! I need 500MB of packages, going to leave it running over night :)
Thanks for all the help.
Kind regards
JG
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of
you have other listing in your
sources.list file.
Periodically Debian releases critical updates to the stable release
which are can include upgrades not specifically security updates but
mostly upgrades the released stable image with the currently active
set of security upgrades. Here is the
mply run aptitude, hit 'u' for upgrade select the
> section upgradable packages, hit '+' to select all the packages for
> upgrades and 2x 'G'. When aptitude confronts you with questions, use
> common sense. That's it.
Security updates are carried unde
On Sunday, 11.09.2005 at 20:11 +0200, oneman wrote:
> >Not sure what the difference is between "apt-get upgrade" and "apt-get
> >dist-upgrade"
> Try man apt-get. In short: dist-upgrade is better at resolving
> dependency conflicts. BTW, Aptitude doesn't (need to) have two ways
> of upgrading,
On 11-sep-2005, at 18:29, J. Grant wrote:
[Please include my email address in any replies]
Hi,
Presently using debian sarge, I would like to update my system with
only
security fixes which have been made available since Sarge was
released.
Now sure how to do this.
would "apt-get upgrade"
[Please include my email address in any replies]
Hi,
Presently using debian sarge, I would like to update my system with only
security fixes which have been made available since Sarge was released.
Now sure how to do this.
would "apt-get upgrade" also update non-security fixed packages?
I have
On 2005-08-17 23:17:01 -0500, [EMAIL PROTECTED] wrote:
> That's it? What about setting it up so that simply running "firefox"
> from anywhere executes the version installed in /opt/firefox? Do you
> make a link in /usr/bin, overwriting the file there,
[...]
You should never touch /usr/bin or you
En/La [EMAIL PROTECTED] ha escrit, a 18/08/05 09:49:
> On 8/18/05, Jonathan Kaye <[EMAIL PROTECTED]> wrote:
>
>>> Or do you make a custom
>>>launcher that directly runs the version in /opt (which would be less
>>>than ideal for a multiuser system)?
>>
> Hey, don't get me wrong, I *love* Debian, a
On 8/18/05, Jonathan Kaye <[EMAIL PROTECTED]> wrote:
>> Or do you make a custom
> > launcher that directly runs the version in /opt (which would be less
> > than ideal for a multiuser system)?
> I don't follow you here. Why would it be "less than ideal"?
It would be less than ideal because then e
En/La [EMAIL PROTECTED] ha escrit, a 18/08/05 06:17:
> On 8/17/05, Jonathan Kaye <[EMAIL PROTECTED]> wrote:
>
> That's it? What about setting it up so that simply running "firefox"
> from anywhere executes the version installed in /opt/firefox? Do you
> make a link in /usr/bin, overwriting the
Well, sorry for posting so many times to this thread; I've learned
some stuff and thought about a lot.
I ended up running "apt-get -t unstable install mozilla-firefox".
That upgraded a lot of stuff, including a bunch of Gnome libs, and
also packages like gnome-panel-data to their 2.10 versions, w
I just found something very strange (to me, anyway). I ran Firefox
from the Mozilla installer. Then I clicked on a link in Thunderbird,
which caused the Debian version to run. But instead of launching a
separate window, the link opened in the existing window. But after
doing that, when I went t
On 8/17/05, Jonathan Kaye <[EMAIL PROTECTED]> wrote:
> Another way to go is to not wait for debian packages. I go directly to
> the firefox, thunderbird, openoffice, etc. and download the latest
> releases. I'm running Firefox 1.0.6 on testing (2.6.8-2) with zero
> problems. Same for TB 1.0.6 and O
On 8/17/05, Vincent Lefevre <[EMAIL PROTECTED]> wrote:
>
> You should look at the package developer page:
>
> http://packages.qa.debian.org/m/mozilla-firefox.html
>
> There you have: "The package has not yet entered testing even though
> the 0-day delay is over. Check why." and by clicking on
On 8/17/05, Peter J Ross <[EMAIL PROTECTED]> wrote:
>
> If a package in testing is the same version as in stable, the security
> updates ought to work for it. Try adding security.debian.org to your
> sources.list and see what happens.
Thanks; I meant to do that last night, bu
On 2005-08-17 15:31:30 +0200, Jonathan Kaye wrote:
> En/La Vincent Lefevre ha escrit, a 17/08/05 13:27:
> > But you need to recompile firefox if you don't have an x86 architecture.
> >
> Hi Vincent,
> Not exactly. There are builds for Solaris and Mac OS X and maybe some
> others as well. I didn't
On Wed, Aug 17, 2005 at 03:31:30PM +0200, Jonathan Kaye wrote:
> Not exactly. There are builds for Solaris and Mac OS X and maybe some
> others as well. I didn't get what platform the OP was using so it
> seemed a reasonable alternative to suggest.
Frankly, it's the only option, unfortunately. The
En/La Vincent Lefevre ha escrit, a 17/08/05 13:27:
> On 2005-08-17 13:06:09 +0200, Jonathan Kaye wrote:
>
>>Another way to go is to not wait for debian packages. I go directly
>>to the firefox, thunderbird, openoffice, etc. and download the
>>latest releases. I'm running Firefox 1.0.6 on testing (
This is simply a mess. Actually, now that I think about it, I suppose
> the reason 1.0.6-2 hasn't moved into Testing is because of the
> dependency problem of libxinerama1 and libc6. But who knows when the
> new version of libc6 will get into Testing? It may be a very long
>
On 2005-08-17 13:06:09 +0200, Jonathan Kaye wrote:
> Another way to go is to not wait for debian packages. I go directly
> to the firefox, thunderbird, openoffice, etc. and download the
> latest releases. I'm running Firefox 1.0.6 on testing (2.6.8-2) with
> zero problems. Same for TB 1.0.6 and OO
On 2005-08-17 09:34:02 +0200, Maurits van Rees wrote:
> Yes. But you may want to search the archives of the debian-user and
> debian-devel mailing lists of the past few weeks, as there have been
> discussions about this subject. I have hardly read it all, but I
> think there were people running t
security problems;
>
> 2) I can't even do that in this case, because Firefox 1.0.6-2 depends
> on libxinerama1, which depends on libc6 >=2.3.5, but Testing is still
> on libc6 2.3.2.
Yes, you need to install all the dependencies. Otherwise, you should
either install the pa
On Wed, Aug 17, 2005 at 06:15:18AM -0400, Carl Fink wrote:
> On Wed, Aug 17, 2005 at 10:54:57AM +0100, Peter J Ross wrote:
>
> > If a package in testing is the same version as in stable, the security
> > updates ought to work for it ...
>
> ... right up until there are
En/La [EMAIL PROTECTED] ha escrit, a 17/08/05 08:01:
> I'm a happy user of Testing, but I'm a bit concerned about getting
> updates to Firefox in a timely manner. The current version in Testing
> is 1.0.4-2, which has recently-announced vulnerabilities in it. The
> vulns (I don't like typing that
On Wed, Aug 17, 2005 at 10:54:57AM +0100, Peter J Ross wrote:
> If a package in testing is the same version as in stable, the security
> updates ought to work for it ...
... right up until there are major library changes in Unstable. Such
changes are happening now. Once that happe
On Wed, Aug 17, 2005 at 01:01:20AM -0500, [EMAIL PROTECTED] wrote:
> I could upgrade Firefox to the version that's in unstable, but there
> are two problems:
If a package in testing is the same version as in stable, the security
updates ought to work for it. Try adding security.de
On Wed, Aug 17, 2005 at 01:01:20AM -0500, [EMAIL PROTECTED] wrote:
> Now, I'm far from an expert, and I'm still fairly new to Debian (less
> than a year), but it seems like something needs to change. I don't
> want to run Unstable on my computer, but I don't want to be stuck with
> vulnerable brow
y read it all, but I
think there were people running testing that had no problem installing
the plain tarball from mozilla.org.
> I know Testing is not supported for security updates, but for
> high-profile packages like Firefox with high-profile vulns, don't we
> need a solution f
Actually, now that I think about it, I suppose
> the reason 1.0.6-2 hasn't moved into Testing is because of the
> dependency problem of libxinerama1 and libc6. But who knows when the
> new version of libc6 will get into Testing? It may be a very long
> time. In the meantime, are w
ion of libc6 will get into Testing? It may be a very long
time. In the meantime, are we Testing users supposed to keep using a
vulnerable version of Firefox?
I know Testing is not supported for security updates, but for
high-profile packages like Firefox with high-profile vulns, don't we
n
I have a system which has the following in /etc/apt/sources.list:
deb http://security.debian.org/ sarge/updates main contrib non-free
It works fine.
However, am I correct to assume that the "contrib" and "non-free"
directories are superfluous in this case and can or ought to be
removed?
I mou
Rakotomandimby (R12y) Mihamina:
>
> what's the security policy of Debian testing?
Generally, security updates will propagate through unstable just like
any other update. Since the release of sarge (or a short time before
that), there is also a repository with security updates
Hi,
what's the security policy of Debian testing?
for several reasons, I must use Debian Testing on a public server and Awstats
has not been upgraded:
http://seclists.org/lists/bugtraq/2005/Aug/0134.html
Should I ask to the package maintainer?
Should I make My own package, waiting fot it?
--
On Wed, Jun 29, 2005 at 04:51:18PM +0200, Hannes Mayer wrote:
> I've been wondering the past few days why there are no updates via
> "apt-get update/upgrade" (I have the correct entries in
> sources.list!). A few days ago I was reading at heise.de
> (http://www.heise.de/newsticker/meldung/61076) th
301 - 400 of 526 matches
Mail list logo
