On Mon, 11 Aug 2003 20:10:48 -0400
Kevin McKinley [EMAIL PROTECTED] wrote:
Is there a way to use cron to apply updates from security.debian.org?
Is there any reason I shouldn't do this?
apt-cache show cron-apt
--
-johann koenig
Now Playing: Let's Go Bowling - Spaced Man! : Still Standing
Michelle Konzack wrote:
Also im DSA-358-1 geht es um den linux-kernel-2.4.18 und da ist irgendwie was
schiefgegangen, denn das Zeugs existiert nicht...
Der kernel ist zum Beispiel:
kernel-image-2.4.18-1-i386_2.4.18-9_i386.deb
aber den gibt es nicht, weil er nänmlich
Hallo
Michelle Konzack ([EMAIL PROTECTED]) wrote:
Also im DSA-358-1 geht es um den linux-kernel-2.4.18 und da ist
irgendwie was schiefgegangen, denn das Zeugs existiert nicht...
Der kernel ist zum Beispiel:
kernel-image-2.4.18-1-i386_2.4.18-9_i386.deb
aber den gibt es nicht, weil
Normally, packages go into testing after having been in sid for some
time.
Is there an exception that allows security updates to be rushed
through, or should these be manually gathered from sid?
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact
On Fri, Jul 25, 2003 at 07:07:17AM -0500, Brian McGroarty wrote:
Normally, packages go into testing after having been in sid for some
time.
Is there an exception that allows security updates to be rushed
through, or should these be manually gathered from sid?
Security updates are usually
On Fri, 2003-07-25 at 08:07, Brian McGroarty wrote:
Normally, packages go into testing after having been in sid for some
time.
Is there an exception that allows security updates to be rushed
through, or should these be manually gathered from sid?
My /etc/apt/source.list entry:
deb http
Hello Greg!
At Friday 25 July 2003 17:40 Greg Folkert wrote:
On Fri, 2003-07-25 at 08:07, Brian McGroarty wrote:
Normally, packages go into testing after having been in sid for
some time.
Is there an exception that allows security updates to be rushed
through, or should these be manually
On Fri, Jul 25, 2003 at 11:30:26AM -0400, Greg Folkert wrote:
On Fri, 2003-07-25 at 08:07, Brian McGroarty wrote:
Normally, packages go into testing after having been in sid for some
time.
Is there an exception that allows security updates to be rushed
through, or should
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Fri, Jul 25, 2003 at 07:07:17AM -0500, Brian McGroarty wrote:
Is there an exception that allows security updates to be rushed
through, or should these be manually gathered from sid?
Neither. Wait it out, otherwise it sort of defeats the point
Hey,
The security updates site is listed as pnly being a http type address. I have
to use ftp from work as there is no way to tell it how to get thru the proxy.
Is there an alternate site to goto that supports ftp?
Patrick
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject
On Thu, Mar 13, 2003 at 08:31:30PM -0600, Patrick L. McGillan wrote:
The security updates site is listed as pnly being a http type address. I have
to use ftp from work as there is no way to tell it how to get thru the proxy.
Is there an alternate site to goto that supports ftp?
ftp
On Fri, 22 Nov 2002 20:43:08 +0100, Thomas Schnhoff
[EMAIL PROTECTED] wrote:
Linux Today hat die neuen Server bei XS4all für die security updates
bekannt gegeben.
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable
Hallo,
für alle, die es interessiert,
Linux Today hat die neuen Server bei XS4all für die security updates
bekannt gegeben.
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Package info: `apt-cache
Wiadomość oryginalna
While the security.debian.org archives are online, the backend for it
(ie the katie and friends) was completely lost and James Troup is
working very hard to restore things.
However what we did loose are the already uploaded security fixes that
had not
Is there some way that I could crontab an apt-get job that would use ONLY the
security debian site for upgrading?
--
I'm starting to think the gene pool could use a little chlorine.
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
At 12:29 Uhr +0100 28.10.2002, Tom Allison wrote:
Is there some way that I could crontab an apt-get job that would use
ONLY the
security debian site for upgrading?
Not that I'm aware of.
But I'm in the middle of writing a perl script that automatically
fetches, gpg checks and (if so desired)
, and only for the security source.
I guess you could say it's a security risk to install any security updates
automatically
If you are tracking stable then the only updates offered are going to
be security updates (well, in theory at least).
Installing *any* updates automatically is bad
Seit kurzem bin ich von Mandrake auf Debian(woody) umgestiegen und bin
sehr begeistert davon. Leider hab ich noch keinen blassen Schimmer wie
man Security-Updates macht. Soweit ich weiß muß ich die
/etc/apt/sourcelist editieren. Aber weiter? Wars das schon? Wie muß ich
sie editieren? Und
hi,
On Sunday 09 June 2002 19:24, Ashanti Dread wrote:
Schimmer wie man Security-Updates macht. Soweit ich weiß muß ich die
/etc/apt/sourcelist editieren. Aber weiter? Wars das schon? Wie muß
ich sie editieren? Und welche Adresse hat der Debian-Security-Server?
in /etc/apt/sources.list:
deb
On Mon, Jun 10, 2002 at 07:31:50PM +0200, Enrico Zschemisch wrote:
in /etc/apt/sources.list:
deb http://security.debian.org/ testing/updates main contrib non-free
ich würde nicht testing, sondern woody als branch nehmen. jetzt wo die
symlinks dann mal geupdated werden und dann später mal
On Fri, May 31, 2002 at 01:47:01PM +0100, Colin Watson wrote:
On Fri, May 31, 2002 at 01:57:17PM +0200, Jean-Charles Preaux wrote:
Just a little question :
is there a security updates sources for the woody release ?
Not yet. There will be when it's released.
In the mean time
On Sun, Jun 02, 2002 at 06:49:31PM -0300, [EMAIL PROTECTED] wrote:
On Fri, May 31, 2002 at 01:47:01PM +0100, Colin Watson wrote:
On Fri, May 31, 2002 at 01:57:17PM +0200, Jean-Charles Preaux wrote:
Just a little question :
is there a security updates sources for the woody release
Jean-Charles Preaux [EMAIL PROTECTED] writes:
Hello
Just a little question :
is there a security updates sources for the woody release ?
as :
deb http://security.debian.org/ http://security.debian.org/
potato/updates main contrib non-free
for the potato release ?
Which i can put
Hello
Just a little question :
is there a security updates
sources for the woody release ?
as :
deb http://security.debian.org/
potato/updates main contrib non-free
for the potato release ?
Which i can put in my /etc/apt/sources.list
?
Thanks
Jean-Charles Preaux
http://analogx.dyndns.org
On Fri, May 31, 2002 at 01:57:17PM +0200, Jean-Charles Preaux wrote:
Just a little question :
is there a security updates sources for the woody release ?
Not yet. There will be when it's released.
--
Colin Watson [EMAIL PROTECTED]
--
To UNSUBSCRIBE
On Sun, Apr 07, 2002 at 11:25:54PM +0200, Christophe Courtois wrote:
Anyhow, woody will be released Real Soon Now(tm), and then the
security policy will be the same as it was for potato.
Does it mean too that I must update from potato rather quickly after
Woody's release if I want all
Anyhow, woody will be released Real Soon Now(tm), and then the
security policy will be the same as it was for potato.
Does it mean too that I must update from potato rather quickly after
Woody's release if I want all security releases ? Is the maintenance of
potato totally stopped after 1st
On Fri, Apr 05, 2002 at 09:40:41AM +0200, Hanspeter Roth wrote:
On Apr 04 at 18:08, John Hasler spoke:
Andrew writes:
Don't security updates also go to unstable?
No. Security updates are almost always done by backporting the fix to the
version of the package that is in stable
On Apr 04 at 18:08, John Hasler spoke:
Andrew writes:
Don't security updates also go to unstable?
No. Security updates are almost always done by backporting the fix to the
version of the package that is in stable. The version in unstable is
almost always a more recent one
Can one switch back to stable without reinstalling the whole?
Probably not. But you don't want to, woody will be soon!
Just keep saying it, woody will be soon...
woody will be soon...
eventually, we'll convince ourselves that it is true ;-)
Seriously --- we now have under 100 RC bugs in
On Apr 05 at 04:31, Anthony DeRobertis spoke:
Just change the 'testing' to 'woody' in your sources, then you
will stay with woody. Which will be stable soon. But after that
happens, change it back to stable
[ And, btw, getting security fixes into testing is now very important,
begin quoting what Anthony DeRobertis said on Fri, Apr 05, 2002 at 04:31:35AM
-0500:
Just change the 'testing' to 'woody' in your sources, then you
will stay with woody. Which will be stable soon. But after that
happens, change it back to stable
Just to head off the next question:
as
Hanspeter Roth writes:
But what about the testing distribution? Does it also get `implicit'
security fixes by new versions?
Or is it safer to stick with stable?
Well, it follows the usual rules, so eventually things will filter
down. In the meantime, I believe you have to grab things from
On Fri, Apr 05, 2002 at 07:28:54AM -0800, Andrew Agno wrote:
Hanspeter Roth writes:
But what about the testing distribution? Does it also get `implicit'
security fixes by new versions?
Or is it safer to stick with stable?
Well, it follows the usual rules, so eventually things will
Can one get security updates for the testing distribution?
I have
deb http://security.debian.org stable/updates main contrib non-free
deb http://http.us.debian.org/debian testing main contrib non-free
in sources.list.
Or sould it be
deb http://security.debian.org testing/updates main
On Thu, Apr 04, 2002 at 10:53:52PM +0200, Hanspeter Roth wrote:
Can one get security updates for the testing distribution?
No. There is no such thing.
--
Note that I use Debian version 3.0
Linux emac140 2.4.17 #1 sön feb 10 20:21:22 CET 2002 i686 unknown
Hans Ekbrand
pgp0sfSbtZ3Nj.pgp
On Apr 04 at 22:57, Hans Ekbrand spoke:
On Thu, Apr 04, 2002 at 10:53:52PM +0200, Hanspeter Roth wrote:
Can one get security updates for the testing distribution?
No. There is no such thing.
Can one switch back to stable without reinstalling the whole?
-Hanspeter
--
To UNSUBSCRIBE
* Hanspeter Roth ([EMAIL PROTECTED]) spake thusly:
On Apr 04 at 22:57, Hans Ekbrand spoke:
On Thu, Apr 04, 2002 at 10:53:52PM +0200, Hanspeter Roth wrote:
Can one get security updates for the testing distribution?
No. There is no such thing.
Can one switch back to stable without
Andrew writes:
Don't security updates also go to unstable?
No. Security updates are almost always done by backporting the fix to the
version of the package that is in stable. The version in unstable is
almost always a more recent one. If it is vulnerable it will be fixed when
the maintainer
John Hasler writes:
Andrew writes:
Don't security updates also go to unstable?
No. Security updates are almost always done by backporting the fix to the
version of the package that is in stable. The version in unstable is
almost always a more recent one. If it is vulnerable
- Export a central /var/cache/apt via NFS or similar
I think this sounds like the most practical idea. Two responses clarified that
the security team is more concerned with people *providing* mirrors of the
updates, as opposed to private copies, but I think I'd still rather avoid the
'ls -lR'
Hello all,
I manage a small groups of Debian stable boxes that manage the internet
side of a local business. I'm wondering if there is a kosher way to only
download security patches once. Our link isn't so hot, and having each of a
dozen boxes go out to security.debian.org for updated
On Tue, Jan 15, 2002 at 02:35:39PM -0500, Ross Vandegrift wrote:
Hello all,
I manage a small groups of Debian stable boxes that manage the internet
side of a local business. I'm wondering if there is a kosher way to only
download security patches once. Our link isn't so hot, and
On Tue, Jan 15, 2002 at 02:35:39PM -0500, Ross Vandegrift wrote:
| I manage a small groups of Debian stable boxes that manage the
| internet side of a local business. I'm wondering if there is a
| kosher way to only download security patches once. Our link isn't
| so hot, and having each of a
On Tue, Jan 15, 2002 at 02:35:39PM -0500, Ross Vandegrift wrote:
Hello all,
I've thought about making a squid proxy to proxy the http requests, but
security.debian.org specifically requests that no mirror of any time be made
of
those packages. Even if a proxy is appropriate and
Hi all,
On the strength of what I read re: getting security updates in the list
archives, I put the following line in my /etc/apt/sources.list file:
deb http://security.debian.org woody/updates main contrib non-free
... but all it generates when I apt-get update apt-get dist-upgrade
On Sun, Nov 25, 2001 at 06:48:19PM -0500, Glenn Becker wrote:
Hi all,
On the strength of what I read re: getting security updates in the list
archives, I put the following line in my /etc/apt/sources.list file:
deb http://security.debian.org woody/updates main contrib non-free
Glenn Becker wrote:
Hi all,
On the strength of what I read re: getting security updates in the list
archives, I put the following line in my /etc/apt/sources.list file:
deb http://security.debian.org woody/updates main contrib non-free
... but all it generates when I apt-get update apt-get
Glenn Becker said:
Hi all,
On the strength of what I read re: getting security updates in the
list archives, I put the following line in my /etc/apt/sources.list
file:
deb http://security.debian.org woody/updates main contrib non-free
security updates are only available for the RELEASED
On Sun, Nov 25, 2001 at 04:30:08PM -0800, nate wrote:
[snip]
no specialized updates are available for woody or sid. you
have to get the updates the same way you get everything else.
be aware that it may take a long time to get security updates
on woody as any new packages must go through
Brad Cramer [EMAIL PROTECTED] wrote:
What line should I put in my sources.lits file in order to get security
updates for sid? Do they come from the stable tree?
No, they just go straight into unstable. You shouldn't need to do
anything special.
--
Colin Watson
What line should I put in my sources.lits file in order to get security
updates for sid? Do they come from the stable tree?
Thanks
Brad
Brad Cramer [EMAIL PROTECTED] writes:
BC What line should I put in my sources.lits file in order to get security
BC updates for sid? Do they come from the stable tree?
No, updates to sid should always include whatever security fixes are
relevant. There's no separate security-update tree for sid.
On Wed, Apr 18, 2001 at 07:47:30PM -0500, DvB wrote:
is there a way to get apt-get to install only packages from
security.debian.org? This without removing all other entries from
/etc/apt/sources.list and running at apt-get update.
thats a poor idea, since security updates are removed from
/sources.list and running at apt-get update.
thats a poor idea, since security updates are removed from
security.debian.org and merged into the mainline dist when a point
release (such as the recent r3) are made.
right now security.debian.org has only two security updates.
On Wed, Apr 18, 2001 at 11:25:57PM -0500, DvB wrote:
So, in other words, it's better to just update from stable every now and
then...?
yup, once a week is a good idea unless you subscribe to
debian-security-annouce (which is better).
--
Ethan Benson
http://www.alaska.net/~erbenson/
: Thursday, April 19, 2001 2:10 PM
To: debian-user
Subject: Re: applying _only_ security updates
On Wed, Apr 18, 2001 at 07:47:30PM -0500, DvB wrote:
is there a way to get apt-get to install only packages from
security.debian.org? This without removing all other entries from
/etc/apt
not. security updates are never [0] new
upstream versions, rather they are the potato (stable) version with
the security fix backported. since testing and unstable have almost
invariably newer versions of packages then what is in stable the
security update will never be installed by apt since its
On Thu, Apr 19, 2001 at 03:32:20PM +1000, Price, Tim wrote:
Regardless,
Is it possible to do?
I ask because I am running a potato system with many packages from woody,
and some security packages take longer to get into testing then they do to
get into stable.
I've heard that the more
is there a way to get apt-get to install only packages from
security.debian.org? This without removing all other entries from
/etc/apt/sources.list and running at apt-get update.
On Wed, Apr 18, 2001 at 07:47:30PM -0500, DvB wrote:
is there a way to get apt-get to install only packages from
security.debian.org? This without removing all other entries from
/etc/apt/sources.list and running at apt-get update.
Just comment out the non security related sources. The
Hi all.
I've just installed a box with packages from the testing dist. Some
questions came to mind about security updates for packages in testing.
If a package is in the testing distribution and a security update is issued
that effects stable, testing and unstable, how long before the testing
Chris Ruvolo wrote:
If a package is in the testing distribution and a security update is issued
that effects stable, testing and unstable, how long before the testing
package is updated? Does it have to go through the full process of
maturation to make it to testing from unstable?
Packages
On Mon, Jan 29, 2001 at 04:23:52PM -0800, Joey Hess wrote:
Chris Ruvolo wrote:
If a package is in the testing distribution and a security update is issued
that effects stable, testing and unstable, how long before the testing
package is updated? Does it have to go through the full process
On Wed, Jan 17, 2001 at 07:46:32PM -0800, Terry Carney wrote:
On Wed, 17 Jan 2001, Benjamin Pharr wrote:
Is there any way I can apt-get the patches for the security updates on
Debian.org? Thanks!
deb http://security.debian.org stable/updates main contrib non-free
You can also do
:46:32PM -0800, Terry Carney wrote:
On Wed, 17 Jan 2001, Benjamin Pharr wrote:
Is there any way I can apt-get the patches for the security updates on
Debian.org? Thanks!
deb http://security.debian.org stable/updates main contrib non-free
You can also do it by ftp, if you prefer
Bill Shui [EMAIL PROTECTED] writes:
ps. anyone know how to get deb packages for KDE2 without upgrading to
unstable?
http://kde.tdyc.com/
moritz
--
Moritz Schulte [EMAIL PROTECTED] http://www.chaosdorf.de/moritz
Debian/GNU supporter - http://www.debian.org/ http://www.gnu.org/
GPG
You can only get security upgrades for packages that you have installed.
You may not have others installed at all. Check non-upgraded packages'
status.
You are absolutely right. That was just too obvious for me. Thanks!
Ben Pharr
Is there any way I can apt-get the patches for the security updates on
Debian.org? Thanks!
Ben Pharr
On Wed, 17 Jan 2001, Benjamin Pharr wrote:
Is there any way I can apt-get the patches for the security updates on
Debian.org? Thanks!
deb http://security.debian.org stable/updates main contrib non-free
T.J. (Terry) Carney
On Wed, Jan 17, 2001 at 09:36:06PM -0600, Benjamin Pharr wrote:
Is there any way I can apt-get the patches for the security updates on
Debian.org? Thanks!
Add the following to /etc/apt/sources.list:
deb http://security.debian.org stable/updates main contrib non-free
--
Bob Nielsen, N7XY
On Wed, Jan 17, 2001 at 09:36:06PM -0600, Benjamin Pharr wrote:
Is there any way I can apt-get the patches for the security updates on
Debian.org? Thanks!
Put this line in your /etc/apt/sources.list
deb http://security.debian.org/ potato/updates main contrib non-free
Assuming your running
At 09:47 PM 1/17/01 , you wrote:
On Wed, Jan 17, 2001 at 09:36:06PM -0600, Benjamin Pharr wrote:
Is there any way I can apt-get the patches for the security updates on
Debian.org? Thanks!
Add the following to /etc/apt/sources.list:
deb http://security.debian.org stable/updates main contrib
On Wed, 17 Jan 2001, Benjamin Pharr wrote:
At 09:47 PM 1/17/01 , you wrote:
On Wed, Jan 17, 2001 at 09:36:06PM -0600, Benjamin Pharr wrote:
Is there any way I can apt-get the patches for the security updates on
Debian.org? Thanks!
Add the following to /etc/apt/sources.list:
deb
I have that in my sources.list, however, I've only had one security update
since installing. There are eight updates listed on the homepage with
dates later that 2.2r2's release. Why have I only gotten one?
are you using the updated software?
Hi,
doing an apt-get -u dist-upgrade appears libc6*, locales as new
packages in security.debian.org but no advice was mailed nor published
in security.debian.org.
So are they real or someone has hacked security.debian.org ?
--
__
Felipe
On Mon, Jan 15, 2001 at 12:13:13PM -0300, Felipe Alvarez Harnecker wrote:
Hi,
doing an apt-get -u dist-upgrade appears libc6*, locales as new
packages in security.debian.org but no advice was mailed nor published
in security.debian.org.
So are they real or someone has hacked
Hello Felipe,
On Mon, Jan 15, 2001 at 12:13:13PM -0300, Felipe Alvarez Harnecker wrote:
doing an apt-get -u dist-upgrade appears libc6*, locales as new
packages in security.debian.org but no advice was mailed nor published
in security.debian.org.
So are they real or someone has hacked
On Mon, Jan 15, 2001 at 11:08:19PM +, Ruben Leote Mendes wrote:
I think the new packages solve the problems mentioned in a recent thread
in debian-security:
http://lists.debian.org/debian-security-0101/msg00011.html
Anyone confirms this?
no, that is a glibc 2.2 specific problem, a
Could anybody please clarify for me,
Should I use proposed-updates/ or security.debian.org in apt-get for
security updates ?
Are there any mirrors for security.debian.org ?
Whats the difference between proposed-updates/ and security.debian.org ?
Thanks
Derm.
On Thu, Nov 02, 2000 at 03:06:09PM -, mr matsui wrote:
Could anybody please clarify for me,
Should I use proposed-updates/ or security.debian.org in apt-get for
security updates ?
security.debian.org
Are there any mirrors for security.debian.org ?
no
Whats the difference between
I downloaded the security updates from debian.org and when i tried to install
them, I got:
lilypad:/home/pollywog# dpkg -i netstd_3.07-2hamm.4_i386.deb
dpkg-deb: `netstd_3.07-2hamm.4_i386.deb' is not a debian format archive
dpkg: error processing netstd_3.07-2hamm.4_i386.deb (--install
On Wed, 17 Feb 1999, Pollywog wrote:
I downloaded the security updates from debian.org and when i tried to install
them, I got:
lilypad:/home/pollywog# dpkg -i netstd_3.07-2hamm.4_i386.deb
dpkg-deb: `netstd_3.07-2hamm.4_i386.deb' is not a debian format archive
dpkg: error processing
501 - 583 of 583 matches
Mail list logo