[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: security.debian.org vs debian-lts respository



Hi Adam,

On Mittwoch, 8. Oktober 2014, Adam D. Barratt wrote:
> The real question is "if there are different packages in squeeze and
> squeeze-proposed-updates, to which one are security patches applied" and
> the obvious answer is squeeze-proposed-updates, as that's what will
> become squeeze at the next point release. (If the package in -updates is
> newer than squeeze, then it is either the same as or older than the
> package in proposed-updates; if the package in -updates is the same or
> older than squeeze then it's irrelevant).

do you think there will be another squeeze point release? I thought it was 
final, but you might know better ;)

> Updating openjdk-6 in LTS to a version > 6b27-1.12.5-1 will still cause
> the same problem, yes. I haven't checked the archive constraints for
> -lts, but certainly having it contain more recent packages than wheezy
> would at the very least break the principle of least surprise.

be surprised:

$ ssh coccia.debian.org dak ls debian-security-support
debian-security-support | 2014.09.07~bpo70+1 | wheezy-backports | source, all
debian-security-support |         2014.09.07 |          testing | source, all
debian-security-support |         2014.09.07 |         unstable | source, all
debian-security-support |  2014.09.11~deb6u1 |      squeeze-lts | source, all
$ dpkg --compare-versions 2014.09.11~deb6u1 gt 2014.09.07 ; echo $?
0


cheers,
	Holger

Attachment: signature.asc
Description: This is a digitally signed message part.


Reply to: