Brian wrote:
> The Wheezy point releases have no BIND9 updates so, without searching
> further, I am unable to check that new libraries were installed. Even
> if they were they would be from stable, which is ok.
This was a recent BIND9 upgrade in Wheezy on 18 Feb 2015.
https://www.debian.org/security/2015/dsa-3162
The BIND package is actually a combined set of libraries plus
executables. They don't have a stable API. Therefore the entire
bundle always needs to be updated. The libraries have the version
number encoded in the name. Therefore it requires dist-upgrade in
order to handle installing bind security releases.
root@despair:/tmp# debdiff bind9_9.8.4.dfsg.P1-6+nmu2+deb7u3_i386.deb bind9_9.8.4.dfsg.P1-6+nmu2+deb7u4_i386.deb
File lists identical (after any substitutions)
Control files: lines which differ (wdiff format)
------------------------------------------------
Depends: libbind9-80 (= [-1:9.8.4.dfsg.P1-6+nmu2+deb7u3),-] {+1:9.8.4.dfsg.P1-6+nmu2+deb7u4),+} libc6 (>= 2.4), libcap2 (>= 2.10), libdns88 (= [-1:9.8.4.dfsg.P1-6+nmu2+deb7u3),-] {+1:9.8.4.dfsg.P1-6+nmu2+deb7u4),+} libgssapi-krb5-2 (>= 1.6.dfsg.2), libisc84 (= [-1:9.8.4.dfsg.P1-6+nmu2+deb7u3),-] {+1:9.8.4.dfsg.P1-6+nmu2+deb7u4),+} libisccc80 (= [-1:9.8.4.dfsg.P1-6+nmu2+deb7u3),-] {+1:9.8.4.dfsg.P1-6+nmu2+deb7u4),+} libisccfg82 (= [-1:9.8.4.dfsg.P1-6+nmu2+deb7u3),-] {+1:9.8.4.dfsg.P1-6+nmu2+deb7u4),+} liblwres80 (= [-1:9.8.4.dfsg.P1-6+nmu2+deb7u3),-] {+1:9.8.4.dfsg.P1-6+nmu2+deb7u4),+} libssl1.0.0 (>= 1.0.0), libxml2 (>= 2.7.4), debconf (>= 0.5) | debconf-2.0, netbase, adduser, lsb-base (>= 3.2-14), bind9utils (= [-1:9.8.4.dfsg.P1-6+nmu2+deb7u3),-] {+1:9.8.4.dfsg.P1-6+nmu2+deb7u4),+} net-tools
Installed-Size: [-811-] {+936+}
Version: [-1:9.8.4.dfsg.P1-6+nmu2+deb7u3-] {+1:9.8.4.dfsg.P1-6+nmu2+deb7u4+}
Sometimes other things sneak in too. At one time a jpeg library
release linked against another newer library than it had originally
been released with and therefore required a new library that it really
shouldn't have needed. I recall submitting a bug and it was simply
closed.
Bob
Attachment:
signature.asc
Description: Digital signature