Re: How to get security updates, but not other packages?

From: oneman (oneman_at_onemanifest.net)
Date: 09/11/05

  • Next message: Dave Ewart: "Re: How to get security updates, but not other packages?"
    Date: Sun, 11 Sep 2005 20:11:33 +0200
    To: Debian users list <debian-user@lists.debian.org>
    
    

    On 11-sep-2005, at 18:29, J. Grant wrote:

    > [Please include my email address in any replies]
    >
    > Hi,
    >
    > Presently using debian sarge, I would like to update my system with
    > only
    > security fixes which have been made available since Sarge was
    > released.
    > Now sure how to do this.
    >
    > would "apt-get upgrade" also update non-security fixed packages?
    >
    AFAIK Sarge is the stable release and only gets security fixes,
    package upgrades to newer versions only take place in Testing (Etch)
    and Unstable (Sid).

    I use aptitude. I simply run aptitude, hit 'u' for upgrade select the
    section upgradable packages, hit '+' to select all the packages for
    upgrades and 2x 'G'. When aptitude confronts you with questions, use
    common sense. That's it.

    > I have this in my sources.lst
    >
    > deb http://security.debian.org/ stable/updates main
    >
    That looks fine

    > Not sure what the difference is between "apt-get upgrade" and "apt-get
    > dist-upgrade"
    Try man apt-get. In short: dist-upgrade is better at resolving
    dependency conflicts. BTW, Aptitude doesn't (need to) have two ways
    of upgrading, it's upgrade function 'fits all'.

    > I've read the FAQ: http://www.debian.org/security/faq and the Securing
    > Debian guide, they appear to omit the info I am looking for:
    >
    > http://www.debian.org/doc/manuals/securing-debian-howto/index.en.html
    >
    > It says about just doing "apt-get upgrade" like I was thinking I
    > needed
    > to. But does that include uncessary stable package changes? Or now
    > Sarge is released are the only package changes for security fixes?
    Only security fixes.
    >
    > Also, I wonder if this will break anything else, for instance I had to
    > install the nvidia package from unstable non-free.
    Don't know about mixing stable and Unstable. Others wil fill you in
    on that I suppose.
    >
    > Thanks in advance for any tips.
    You're welcome
    >
    > Kind regards
    > JG
    >

    Groet,

    Peter Teunissen

    -- Never argue with idiots; they'll drag you down to their own level
    and beat you on experience.

    -- 
    To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org 
    with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
    

  • Next message: Dave Ewart: "Re: How to get security updates, but not other packages?"

    Relevant Pages

    • Re: broken nvidia package, is there a work around?
      ... > I'm running Sarge and I just tried installing nvidia's proprietary ... > dependency problems - leaving unconfigured ... > Reading Package Lists... ... contrib to your /etc/apt/sources.list lines like ...
      (Debian-User)
    • Re: OpenSSL version 0.9.7e ?!
      ... to a kernel from Sarge. ... and the stable debian package build version is -4... ... Even with a backport of the security fixes, i can't guess how the ssl ...
      (Debian-User)
    • Sarge Upgrade DEBOCLE ! ! !
      ... I have mistakenly trusted the Debian community and upgraded to Sarge ... installation script returned error exit status 100. ... Slashdot has written how 30% of Sarge upgrades are failing. ...
      (Debian-User)
    • Re: keeping the packages up to date
      ... package available using aptitude is 2.0.55, ... It is the policy of Debian (and Ubuntu does the same) to backport only ... security fixes and apply them to the Ubuntu version. ... So do you mean to say that even though my Apache2 version is to 2.0.55, and up to date form the package repository, it is still actually up to date with regards to security fixes? ...
      (Ubuntu)
    • Re: compiling programs in debian way
      ... and I am going to compile a program which is not in ... sarge but in testing. ... Package: debian-builder ... Maintainer: Debian QA Group ...
      (Debian-User)