Hi! Many people asked (in messages to security@d.o) how to get the security updates when there's a newer version of the package in question in proposed-updates, so I thought that posting this here could be useful. Here's the way I do it recently: Add (for every package you need) an entry like this into /etc/apt/preferences: Explanation: override stable-updates/stable-security desync Package: ssh Pin: release l=Debian-Security Pin-Priority: 1001 This seems to work better then othe suggested ways: - puting the package on hold (you need to override it when the security update is updated again) - removing proposed-updates from sources.list (2.4.x kernels from Herbert are there) Maybe this could be added to the security team FAQ? Disclaimer: I'm not a member of the security team. Marcin -- Marcin Owsiany <porridge@debian.org> http://marcin.owsiany.pl/ GnuPG: 1024D/60F41216 FE67 DA2D 0ACA FC5E 3F75 D6F6 3A0D 8AA0 60F4 1216
Attachment:
signature.asc
Description: Digital signature