apt-get upgrade does not upgrade openssh because of name ordering

[Thomas Lange <lange@informatik.Uni-Koeln.DE>]

Hi folks,

I just want to upgrade my woody machine (because of ssh security
problems) but found, that is does not work. Is my souces.list wrong?

This is my sources.list

deb file:/scratch/debmirror/debian woody main contrib non-free
deb file:/scratch/debmirror/debian woody-proposed-updates main contrib non-free
deb file:/scratch/debmirror/debian-non-US woody/non-US main contrib non-free
deb file:/scratch/debmirror/debian-non-US woody-proposed-updates/non-US main contrib non-free
deb file:/scratch/debmirror/debian-security/ woody/updates main contrib non-free


I have a local mirror of all these parts. I think the new ssh is not
installed, because the name of the package ssh_3.4p1-1.woody.1 seems
to be more up-to-date than the name ssh_3.4p1-1.1. I this an error?


Here are the listings of all aah packages

> find -name Packages.gz | xargs zgrep ssh_3.4p1
./debian/dists/woody/main/binary-i386/Packages.gz:Filename: pool/main/o/openssh/ssh_3.4p1-1_i386.deb
./debian/dists/woody-proposed-updates/main/binary-i386/Packages.gz:Filename: pool/main/o/openssh/ssh_3.4p1-1.woody.1_i386.deb
./debian-security/dists/woody/updates/main/binary-i386/Packages.gz:Filename: pool/updates/main/o/openssh/ssh_3.4p1-1.1_i386.deb

-- 
regards Thomas