[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: How to get security updates, but not other packages?



On 11-sep-2005, at 18:29, J. Grant wrote:

[Please include my email address in any replies]

Hi,

Presently using debian sarge, I would like to update my system with only security fixes which have been made available since Sarge was released.
Now sure how to do this.

would "apt-get upgrade" also update non-security fixed packages?

AFAIK Sarge is the stable release and only gets security fixes, package upgrades to newer versions only take place in Testing (Etch) and Unstable (Sid).

I use aptitude. I simply run aptitude, hit 'u' for upgrade select the section upgradable packages, hit '+' to select all the packages for upgrades and 2x 'G'. When aptitude confronts you with questions, use common sense. That's it.

I have this in my sources.lst

deb http://security.debian.org/ stable/updates main

That looks fine

Not sure what the difference is between "apt-get upgrade" and "apt-get
dist-upgrade"
Try man apt-get. In short: dist-upgrade is better at resolving dependency conflicts. BTW, Aptitude doesn't (need to) have two ways of upgrading, it's upgrade function 'fits all'.

I've read the FAQ: http://www.debian.org/security/faq and the Securing
Debian guide, they appear to omit the info I am looking for:

http://www.debian.org/doc/manuals/securing-debian-howto/index.en.html

It says about just doing "apt-get upgrade" like I was thinking I needed
to.  But does that include uncessary stable package changes?  Or now
Sarge is released are the only package changes for security fixes?
Only security fixes.

Also, I wonder if this will break anything else, for instance I had to
install the nvidia package from unstable non-free.
Don't know about mixing stable and Unstable. Others wil fill you in on that I suppose.

Thanks in advance for any tips.
You're welcome

Kind regards
JG





Groet,


Peter Teunissen

-- Never argue with idiots; they'll drag you down to their own level and beat you on experience.




Reply to: