[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [apt] Disabling upgrade to insecure packages



On Fri, Jan 10, 2003 at 10:32:44PM +0100, Vincent Lefevre wrote:
> On Fri, Jan 10, 2003 at 12:27:32 -0800, Bob Nielsen wrote:
> > In most cases of security alerts, both stable and unstable get prompt
> > updates with the necessary fixes, but testing does not (until the
> > unstable version migrates downward).  I'm running testing and have used
> > 'apt-get -b source' to grab the unstable source and build a package of
> > the newer version, where necessary. 
> 
> But I want to keep dependencies consistent.

If you do this, dependencies will be consistent, but not equal to those
in the outside world. basically, there are 3 kinds of dependencies :
- build-dependencies : these aren't really a problem here
- dynamically-made library dependencies : whatever was needed by the
  package just after building
- explicitely mentionned dependencies.

Of these, only the dynamically-made library dependencies will be
different for your locally-built package, (they may be different 
for a locally-built package of the same distribution as well), but
they should be _correct_. If they aren't, it is a bug in the source
package.

Frank
> 
> -- 
> Vincent Lefèvre <vincent@vinc17.org> - Web: <http://www.vinc17.org/> - 100%
> validated (X)HTML - Acorn Risc PC, Yellow Pig 17, Championnat International
> des Jeux Mathématiques et Logiques, TETRHEX, etc.
> Work: CR INRIA - computer arithmetic / SPACES project at LORIA
> 
> 
> -- 
> To UNSUBSCRIBE, email to debian-user-request@lists.debian.org 
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org



Reply to: