Re: Package management and security

["Frédéric PICA" <frederic.pica@gmail.com>]

Thanks for your answer,

So I need to do an apt-get dist-upgrade in my cron job to be sure to always have the latest security fixes ?
What's the risk to have a needed package uninstalled by that way ?

My goal is to have the latest security fixes for a server, but I have to be sure that dist-upgrade will not broke my server by removing needed pacakges, for example mod_php for apache or things like that.

FP

2007/6/7, Riku Valli <riku.valli@vallit.fi>:

Frédéric PICA wrote:
> Greets,
>
> I saw in 'man apt-get' that using apt-get upgrade does not install new
> packages or remove an already installed package.
> Is it possible that I did'nt get the latest security fixes using
> apt-get upgade in a cron job ?
> I think particularly about security fixes that can't be retro-ported
> to the debian stable version and needs to upgrade the package to the
> latest author available version, what's going on if the package
> dependencies changes ? Does the security patched will be installed
> with it's new dependencies anyway or does the package will not be
> upgraded ?
>
> Thanks for your help,
> FP
>
>
Hi

apt-get upgrade only upgrade your packages for newer version. When
package is upgraded this way at it need new extra packages, then upgrade
can't upgrade your package. You must install it.


-- Riku