Bug#383600: behaviour of update-initramfs -u has changed, only updates latest kernel initrd

[Sven Luther <sven.luther@wanadoo.fr>]

On Fri, Aug 18, 2006 at 07:03:52PM +0200, Michael Biebl wrote:
> Eduard Bloch wrote:
> > #include <hallo.h>
> > * Michael Biebl [Fri, Aug 18 2006, 01:07:34PM]:
> >> Eduard Bloch wrote:
> >>> #include <hallo.h>
> >>> * Michael Biebl [Fri, Aug 18 2006, 10:26:53AM]:
> >>>> I suggest to revert to the old behaviour and make "-u" update all
> >>>> installed kernels. Atm I have to specify each kernel separately vi -k to
> >>>> update them all.
> >>> Why should one update _all_ initramfs images when beeing interested in
> >>> only single one? 
> >> Why should I be only interested in only a single one? If I install e.g.
> > 
> > Because usualy it gets executed when you install a kernel-image package?
> 
> Just grep for update-initramfs  in /var/lib/dpkg/info/*.postinst.
> I get uswsusp, cryptsetup, mdadm and udev on my machine.
> They all simply call update-initramfs -u.
> This means that security updates of these packages are not automatically
> applied to all installed kernels which is a major security issue imho.
> If you insist that update-initramfs -u only updates the latest kernel,
> you should file bug reports against all packages using update-initramfs -u.

or better yet, make the behaviour configurable, in a system wide debconf
setting for example :)

Friendly,

Sven Luther