dselect strangeness re. "pinning" and openssl security update

["Ralf G. R. Bergs" <rabe@RWTH-Aachen.DE>]

[Cc to pkg maintainer]


Hi folx,

I had a strange problem with one machine I wanted to update in order to 
install the fixed openssl. No matter what I did it wouldn't offer me 0.9.6g-
0.woody.1, but only the regular (already installed) "stable" version.

Since I was using the "pinning" feature of APT I temporarily removed the 
"testing" deb sources from my sources.list -- to no avail. I then removed my 
apt.conf file that looked like this:

    APT::Default-Release "stable";

Only then was I able to install the updated openssl version.

How come? Is that a problem with the fixed version of openssl not containing a 
"stable" tag?

Here's my sources.list:

deb     http://ftp.de.debian.org/debian stable main contrib non-free
deb-src http://ftp.de.debian.org/debian stable main contrib non-free
deb     http://ftp.de.debian.org/debian-non-US/ stable/non-US main contrib 
non-free
deb-src http://ftp.de.debian.org/debian-non-US/ stable/non-US main contrib 
non-free
deb     http://ftp.de.debian.org/debian woody-proposed-updates main contrib 
non-free

deb     http://security.debian.org stable/updates main contrib non-free
deb-src http://security.debian.org stable/updates main contrib non-free

Suggestions anyone?!

Thanks,

Ralf


-- 
   L I N U X       .~.
  The  Choice      /V\
   of a  GNU      /( )\
  Generation      ^^-^^