[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Security of Debian Testing



On Sunday 23 Jan 2005 12:04, Floris Bruynooghe wrote:
> On Sun, Jan 23, 2005 at 11:14:28AM +0000, Bob Hutchinson wrote:
> > On Sunday 23 Jan 2005 09:37, Anthony Simonelli wrote:
> > > I realize that Debian Testing "Sarge" is not supported by the Security
> > > Team and that it is the last branch of the Debian to receive updates.
> >
> > I run servers on both testing and stable and the security updates are the
> > same on both, as they both come from the same place,
> >
> > deb http://security.debian.org/ stable/updates main contrib non-free
>
> Erm, afaik this line won't do anything on your testing
> machines...  Only packages witht the stable version number will
> get uploaded into this archive.  The apt system will not consider
> these security updates as it has more recent versions of the
> packages from you testing archive.  That's whats meant with
> "there's no security support for testing" I thought.

hmmmm
well, it is what the netinstall iso put into sources.list by default, I can 
see them come in, I can see the debs get installed and I can see them in the 
cache. Nuff said ;-)

The iso I currently use is
http://cdimage.debian.org/pub/cdimage-testing/sarge_d-i/i386/rc2/sarge-i386-netinst.iso

BTW, I noticed that a number of packages in testing have been renamed, 
with'sarge' in their name. This occurred in the first update that I did this 
year, it was massive and every update since has been considerably larger than 
they were before. By looking at datestamps on 
ftp.uk.debian.org/debian/dists/testing and dists/stable I can see that a 
great many packages in stable were updated on December 30, presumably from 
testing. But that is just presuming of course ;)

-- 
-----------------
Bob Hutchinson
Midwales dot com
-----------------



Reply to: