Re: Are Debian packages updated within a release?

[George at Clug <Clug@goproject.info>]

Hi all,

I became confused by comments on version numbers from the rsync discussion.

Rsync CVE-2024-12085
https://security-tracker.debian.org/tracker/CVE-2024-12085
bookworm (security)	3.2.7-1+deb12u2	fixed


I am still not sure but this is how I understand version numbering for rsync:

While in Debian 12, rsync's version will remain at 3.2.7-1, the security patched version number is 3.2.7-1+deb12u2.

Hence there is no need for me to be concerned about Debian 12 security.

What I am confused about is that chromium does change its version, for example "131.0.6778.264-1~deb12u1" to "132.0.6834.83-1~deb12u1".

Maybe different packages follow different rules?   However there may be a better explanation.

Would I be correct in assuming this is because the version of Chromium (as in its features) are being updated within  Debian 12, where as the version of rsync (as in features) are not being updated, just a security fix is being applied?  And I can use "apt list -a rsync" to confirm that the security fixed version is or is not installed to my computers by checking for "3.2.7-1+deb12u2" as per the security-tracker report.

Thanks,

George.  



# apt list -a rsync
Listing... Done
rsync/stable-security 3.2.7-1+deb12u2 amd64 [upgradable from: 3.2.7-1]
rsync/stable,now 3.2.7-1 amd64 [installed,upgradable to: 3.2.7-1+deb12u2]

rsync/stable-security 3.2.7-1+deb12u2 i386
rsync/stable 3.2.7-1 i386

# apt list -a chromium
Listing... Done
chromium/stable-security 132.0.6834.83-1~deb12u1 amd64 [upgradable from: 131.0.6778.264-1~deb12u1]
chromium/now 131.0.6778.264-1~deb12u1 amd64 [installed,upgradable to: 132.0.6834.83-1~deb12u1]
chromium/stable 131.0.6778.139-1~deb12u1 amd64

chromium/stable-security 132.0.6834.83-1~deb12u1 i386
chromium/stable 131.0.6778.139-1~deb12u1 i386




On Saturday, 18-01-2025 at 10:57 George at Clug wrote:
> Hi,
> 
> 
> Are Debian packages updated within a release?
> 
> 
> After running: "# apt update"
> 
> # apt list -a linux-image-amd64
> Listing... Done
> linux-image-amd64/stable-backports 6.11.10-1~bpo12+1 amd64
> linux-image-amd64/stable-updates 6.1.124-1 amd64 [upgradable from:
> 6.1.106-3]
> linux-image-amd64/stable 6.1.123-1 amd64
> linux-image-amd64/stable-security 6.1.119-1 amd64
> linux-image-amd64/now 6.1.106-3 amd64 [installed,upgradable to:
> 6.1.124-1]
> 
> # apt list -a nvidia-driver
> Listing... Done
> nvidia-driver/stable 535.216.01-1~deb12u1 amd64
> nvidia-driver/stable-backports 535.183.06-1~bpo12+1 amd64
> nvidia-driver/stable-updates 525.147.05-7~deb12u1 amd64
> 
> # apt list -a chromium
> Listing... Done
> chromium/stable-security 132.0.6834.83-1~deb12u1 amd64
> chromium/stable 131.0.6778.139-1~deb12u1 amd64
> 
> # apt list -a firefox-esr
> Listing... Done
> firefox-esr/stable-security 128.6.0esr-1~deb12u1 amd64 [upgradable
> from: 115.15.0esr-1~deb12u1]
> firefox-esr/stable 128.5.0esr-1~deb12u1 amd64
> firefox-esr/now 115.15.0esr-1~deb12u1 amd64 [installed,upgradable to:
> 128.6.0esr-1~deb12u1]
> 
> # apt list -a rsync
> Listing... Done
> rsync/stable-security 3.2.7-1+deb12u2 amd64
> rsync/stable 3.2.7-1 amd64
> 
> 
> George.
>