[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Security updates for hold package



On Jo, 15 mai 14, 19:35:40, Theodore Alcapotaxis wrote:
> > ----- Original Message -----
> > From: Andrei POPESCU
> > Sent: 05/15/14 04:50 AM
> > To: debian-user@lists.debian.org
> > Subject: Re: Security updates for hold package
> > 
> > 
> > Assumptions:
> > 1. You did not change the default priority for backports
> 
> How does one change "default priority" for backports? What will happen 
> if I change the default priority?

Depends on how you change it, but the default works just fine, you don't 
need to adjust it. If you want to read more about it see

    man apt_preferences
 
> > 2. You installed the linux-image-<version>-<flavor> package from 
> > backports and *not* the corresponding meta-package 
> > linux-image-<flavour>.
> 
> Yes, I installed the linux-image-<version>-<flavor> package from 
> backports. What is a "meta-package"?

A meta-package is a package that exists only to depend on other 
packages. In the case of linux-image-<flavour> it will depend on the 
current kernel from the *same* release.

Other meta-packages are used to install entire collections of software, 
or ensure automatic transitions when package names change (also called 
transition or dummy packages).

> Is it necessary to install it?

Depends on what you want to achieve. If you somehow need (e.g. for 
hardware support) a newer kernel than available in stable I would advise 
you install linux-image-<flavour> from backports:

    apt-get install -t wheezy-backports linux-image-amd64

(you didn't mention which flavour you are using so I guessed amd64)

This will make sure you're always upgraded to the current kernel in 
backports. Do make sure to keep the previous backports kernel around, in 
case you have troubles with the newer kernel.

However, if you don't really need a newer kernel you might as well stay 
with stable. Just because you can doesn't mean you have to install a 
newer one.

> > If your 
> > linux-image-<flavour> is from backports such changes will not be picked 
> > up automatically.
> 
> What should I do to ensure that backported linux-image-<flavor> pick 
> up such changes?

This is out of your hands. As a user you can only choose between 
installing linux-image-<flavour> from stable, which will always depend 
on the latest stable kernel, or the version from backports, which will 
always depend on the latest backports kernel.

You haven't yet stated why you need the backports kernel, but if you 
want to keep using it install the backports meta-package.

The stable kernel will still be upgraded until an ABI bump happens 
(which may as well never happen for the lifetime of wheezy). It is a 
good idea to subscribe to the debian-security-announce mailing list, 
such changes will be announced there (along with all other security 
updates).

Also, if you only keep it around as a double insurance it doesn't matter 
so much if it's not up-to-date, as long as it boots correctly. Just 
remember to update it if you use it for more than just a recovery boot.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser
Offtopic discussions among Debian users and developers:
http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic
http://nuvreauspam.ro/gpg-transition.txt

Attachment: signature.asc
Description: Digital signature


Reply to: