Re: Feature request for packages.d.o

[Junichi Uekawa <dancer@netfort.gr.jp>]

> I work in a highly secure environment where sizeable chunks of our
> infrastructure can't go making HTTP connections out to the Internet at
> large. In these situations, if I suspect a new package is available, I'd
> like to be able to just visually inspect the version number that I have
> installed and compare it against the version packages.d.o reports as
> available. This doesn't scale terribly well, I realise. At the moment
> though, packages.d.o doesn't factor in security updates, so (for example)  
> if libc6 has already had 2 security updates and a box has been kept up to
> date, the installed version is going to look nothing like the version 
> originally shipped in stable.
> 
> Hope this makes sense.

How about keeping a similar set-up machine ?

# apt-get dist-upgrade -s |grep Security

gives a good summary of what security updates are necessary.
I tend to use this information for keeping 
machines without direct network access up to date.


regards,
	junichi