Re: Stable repository ambiguous?

[Roland Stigge <stigge@antcom.de>]

Hi,

Steve Langasek wrote:
> I don't see any evidence of this old package version on
> security.debian.org. There's something strange in the user's apt-cache
> policy, though; where are the priority lines for each of the
> configured apt sources?  Definitely looks like local breakage to me.
>
> Anyway, "apt-cache policy dia" would at least tell where the broken
> version of dia is coming from.

Testing it myself, I added

deb http://security.debian.org/ etch/updates main contrib non-free

to /etc/apt/sources.list

and

# apt-cache policy dia
dia:
  Installed: 0.96.1-4
  Candidate: 0.96.1-4
  Version table:
 *** 0.96.1-4 0
        100 /var/lib/dpkg/status
     0.96.1-3 0
        500 file: sid/main Packages
     0.95.0-4.1+b1 0
        500 http://ftp.de.debian.org etch/main Packages
     0.94.0-17.1etch1 0
        500 http://security.debian.org etch/updates/main Packages
#

Is this enough evidence? Further, it is listed as the "Stable Security 
Updates" version at http://packages.qa.debian.org/d/dia.html although 
lower version than the stable (0.95.0-4.1) one.

bye,
  Roland