[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#459148: apt-get source does not fetch the source for the current security release



On Fri, Jan 04, 2008 at 03:03:04PM +0100, Raoul Bhatia [IPAX] wrote:
> Package: apt
> Version: 0.6.46.4-0.1
> Severity: normal
> 
> $ apt-cache policy php5
> php5:
>   Installed: (none)
>   Candidate: 5.2.0-8+etch9
>   Version table:
>      5.2.0-8+etch9 0
>         900 http://security.debian.org etch/updates/main Packages
>      5.2.0-8+etch7 0
>         900 http://aptcacher etch/main Packages
> 
> but:
> 
> $ apt-get source php5
> Reading package lists... Done
> Building dependency tree... Done
> Need to get 8703kB of source archives.
> Get:1 http://aptcacher etch/main php5 5.2.0-8+etch7 (dsc) [1976B]
> Get:2 http://aptcacher etch/main php5 5.2.0-8+etch7 (tar) [8583kB]
> Get:3 http://aptcacher etch/main php5 5.2.0-8+etch7 (diff) [118kB]
> Fetched 8703kB in 3s (2793kB/s)
> dpkg-source: extracting php5 in php5-5.2.0
> dpkg-source: unpacking php5_5.2.0.orig.tar.gz
> dpkg-source: applying ./php5_5.2.0-8+etch7.diff.gz
> 
> so the security debian upgrade is not honored :-/
> 
> arge
> #deb http://aptcacher/apt-cacher/debian.inode.at/debian/ sarge main
> non-free contrib
> #deb-src http://aptcacher/apt-cacher/debian.inode.at/debian/ sarge
> main non-free contrib
> 
> #deb http://aptcacher/apt-cacher/debian.inode.at/debian-non-US
> sarge/non-US main contrib non-free
> #deb-src http://aptcacher/apt-cacher/debian.inode.at/debian-non-US
> sarge/non-US main contrib non-free
> 
> deb http://security.debian.org/ sarge/updates main contrib non-free
> 
> # etch
> deb http://aptcacher/apt-cacher/debian.inode.at/debian/ etch main
> non-free contrib
> deb-src http://aptcacher/apt-cacher/debian.inode.at/debian/ etch main
> non-free contrib
> 
> #deb http://aptcacher/apt-cacher/debian.inode.at/debian-non-US
> etch/non-US main contrib non-free
> #deb-src http://aptcacher/apt-cacher/debian.inode.at/debian-non-US
> etch/non-US main contrib non-free
> 
> deb http://security.debian.org/ etch/updates main contrib non-free
> 
> # php5
> #deb http://people.debian.org/~dexter php5 sarge
> #deb-src http://people.debian.org/~dexter php5 sarge
> #deb http://people.debian.org/~dexter php5.1 sarge
> #deb-src http://people.debian.org/~dexter php5.1 sarge
> 


As can be seen above,  you have a deb line for security.debian.org but
you have no corresponding deb-src line,  so apt-get source fetched the
latest source available using "deb-src http://aptcacher/apt-cacher/debian.inode.at/debian/...";

I'm closing as this is not a bug.

thanks,
stew

Attachment: signature.asc
Description: Digital signature


Reply to: