[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Question on CVE-2017-5754 on Debian 8.9





On 24 January 2018 at 16:19, Greg Wooledge <wooledg@eeg.ccf.org> wrote:
On Wed, Jan 24, 2018 at 03:49:08PM +0000, Michael Fothergill wrote:
> If you can be sid and experimental together then I guess [...]

Experimental is not a release.  You can't "be experimental".  It is
merely a place where individual packages are uploaded, when they are
considered "not ready to be in unstable yet".

Typically the package maintainer EXPECTS these packages to have bugs,
and wants focused help from people who are familiar with the package
to find and squish them.  Or, the package may be uploaded in a "known
broken" condition because it could still be useful in highly specialized
circumstances, where the new features outweigh the known bugs.

The packages in experimental do NOT automatically migrate into unstable
or testing.  They are not part of the normal package lifecycle.

To use a package from experimental, you must download it directly, and
install it directly.  You don't use apt or its cousins, unless it's
to backfill dependencies (apt-get -f install) from your actual release.

​Does that mean you use dpkg -i to ibstall it then?

Cheers

MF​
 


Reply to: