Re: Question on CVE-2017-5754 on Debian 8.9
On 2018-01-25 21:20:23 +0100, Jochen Spieker wrote:
> You can use apt or aptitude for packages in experimental and I see no
> reason against doing that. You do not even need to pin experimental.
> Packages from experimental are automatically assigned priority 1, except
> upgrades for packages that you installed from experimental.
>
> That means you can add experimental to your sources.list and apt will
> not automatically upgrade your packages from testing/sid to the versions
> from experimental. But when you manually select a version from
> experimental (using '-t experimantal'), apt will automatically upgrade
> to newer versions available from experimental. And when testing/sid
> contains a newer version, the one from experimental will be replaced by
> that one.
With aptitude, this is not true. See the discussions at:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=795228
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823928
--
Vincent Lefèvre <vincent@vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)
Reply to: