stretch security updates

[Felix Natter <fnatter@gmx.net>]

hi,

I had a wrong configuration in sources.list (for about half a year :-():

deb http://security.debian.org/ stretch/updates main contrib non-free
deb-src http://security.debian.org/ stretch/updates main contrib non-free

which I corrected now:

deb http://security.debian.org/debian-security/ stretch/updates main contrib non-free
deb-src http://security.debian.org/debian-security/ stretch/updates main contrib non-free

Now I see when doing apt-get update:
OK:1 http://ftp.debian.org/debian stretch-updates InRelease
OK:2 http://download.virtualbox.org/virtualbox/debian stretch InRelease                                                                                   
OK:3 http://linux.teamviewer.com/deb stable InRelease                                                                                                     
Ign:4 http://ftp.de.debian.org/debian stretch InRelease                                                   
OK:5 http://linux.teamviewer.com/deb preview InRelease                       
OK:6 http://ftp.de.debian.org/debian unstable InRelease
OK:7 http://ftp.de.debian.org/debian stretch Release 
Holen:8 http://security.debian.org/debian-security stretch/updates InRelease [63,0 kB]
Holen:10 http://security.debian.org/debian-security stretch/updates/non-free Sources [772 B]
Holen:11 http://security.debian.org/debian-security stretch/updates/main Sources [125 kB]
Holen:12 http://security.debian.org/debian-security stretch/updates/contrib Sources [1.384 B]
Holen:13 http://security.debian.org/debian-security stretch/updates/main i386 Packages [341 kB]
Holen:14 http://security.debian.org/debian-security stretch/updates/main amd64 Packages [340 kB]
Holen:15 http://security.debian.org/debian-security stretch/updates/main Translation-en [151 kB]
Holen:16 http://security.debian.org/debian-security stretch/updates/contrib i386 Packages [1.776 B]
Holen:17 http://security.debian.org/debian-security stretch/updates/contrib amd64 Packages [1.776 B]
Holen:18 http://security.debian.org/debian-security stretch/updates/contrib Translation-en [1.759 B]
Holen:19 http://security.debian.org/debian-security stretch/updates/non-free i386 Packages [1.268 B]
Holen:20 http://security.debian.org/debian-security stretch/updates/non-free amd64 Packages [1.268 B]
Holen:21 http://security.debian.org/debian-security stretch/updates/non-free Translation-en [481 B]
Es wurden 1.030 kB in 1 s geholt (664 kB/s).             
Paketlisten werden gelesen... Fertig

But I still do not get the stretch 9.4 security updates, like
firefox-esr for example [1].

However, looking at the package status for firefox-esr [2], there does
not seem to be a [security] update (but maybe it's just designated
differently since stretch?). In any case, that version
(52.6.0esr-1~deb9u1) is installed.

Is that because the 9.4 release pulls in all sec updates in the regular
update channel?

[1] https://www.debian.org/News/2018/20180310
[2] https://packages.debian.org/search?searchon=sourcenames&keywords=firefox-esr

Many Thanks and Best Regards,
-- 
Felix Natter
debian/rules!