[DNG] Devuan Jessie security maintenance status
Hi, I know that Jessie doesn't get as much attention as stable from a security perspective, but is Jessie in Devuan still receiving security updates at all? I still have several Devuan Jessie boxes, and they didn't got security updates for weeks. I also have a _Debian_ Jessie box, and this computer got at least a few security updates (e.g. kernel/linux-image-*) in the last weeks. Kind regards, Henry ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Devuan Jessie security maintenance status
On Fri, May 03, 2019 at 03:51:09PM +0200, Henry Jensen via Dng wrote:
> Hi,
>
> I know that Jessie doesn't get as much attention as stable from a
> security perspective, but is Jessie in Devuan still receiving security
> updates at all? I still have several Devuan Jessie boxes, and they
> didn't got security updates for weeks.
>
> I also have a _Debian_ Jessie box, and this computer got at
> least a few security updates (e.g. kernel/linux-image-*) in the last
> weeks.
What package do you use?
`linux-image-{amd64|i386}` or `linux-image-3.16.0-8-{amd64|i386}`?
I had install the last kernel update manually from jessie-security repo:
`linux-image-3.16.0-8-amd64`
if do you have `linux-image-{amd64|i386}` it should be autoupdate with a
`apt upgrade`
> Kind regards,
>
> Henry
> ___
> Dng mailing list
> Dng@lists.dyne.org
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Devuan Jessie security maintenance status
Am Fri, 3 May 2019 11:52:31 -0300
schrieb Gastón via Dng :
> On Fri, May 03, 2019 at 03:51:09PM +0200, Henry Jensen via Dng wrote:
> > Hi,
> >
> > I know that Jessie doesn't get as much attention as stable from a
> > security perspective, but is Jessie in Devuan still receiving
> > security updates at all? I still have several Devuan Jessie boxes,
> > and they didn't got security updates for weeks.
> >
> > I also have a _Debian_ Jessie box, and this computer got at
> > least a few security updates (e.g. kernel/linux-image-*) in the last
> > weeks.
>
> What package do you use?
>
> `linux-image-{amd64|i386}` or `linux-image-3.16.0-8-{amd64|i386}`?
>
> I had install the last kernel update manually from jessie-security
> repo: `linux-image-3.16.0-8-amd64`
>
> if do you have `linux-image-{amd64|i386}` it should be autoupdate
> with a `apt upgrade`
It doesn't.
"apt search linux-image-3.16.0-8-amd64" yields no results.
My sources.list:
deb http://auto.mirror.devuan.org/merged jessie main
deb http://deb.devuan.org/merged jessie-security main
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Devuan Jessie security maintenance status
On Fri, May 03, 2019 at 05:03:56PM +0200, Henry Jensen wrote:
> Am Fri, 3 May 2019 11:52:31 -0300
> schrieb Gastón via Dng :
>
> > On Fri, May 03, 2019 at 03:51:09PM +0200, Henry Jensen via Dng wrote:
> > > Hi,
> > >
> > > I know that Jessie doesn't get as much attention as stable from a
> > > security perspective, but is Jessie in Devuan still receiving
> > > security updates at all? I still have several Devuan Jessie boxes,
> > > and they didn't got security updates for weeks.
> > >
> > > I also have a _Debian_ Jessie box, and this computer got at
> > > least a few security updates (e.g. kernel/linux-image-*) in the last
> > > weeks.
> >
> > What package do you use?
> >
> > `linux-image-{amd64|i386}` or `linux-image-3.16.0-8-{amd64|i386}`?
> >
> > I had install the last kernel update manually from jessie-security
> > repo: `linux-image-3.16.0-8-amd64`
> >
> > if do you have `linux-image-{amd64|i386}` it should be autoupdate
> > with a `apt upgrade`
>
>
> It doesn't.
>
> "apt search linux-image-3.16.0-8-amd64" yields no results.
>
> My sources.list:
>
> deb http://auto.mirror.devuan.org/merged jessie main
> deb http://deb.devuan.org/merged jessie-security main
`$ apt search linux-image-3.16.0-8-amd64
linux-image-3.16.0-8-amd64/oldstable-security,now 3.16.64-2 amd64 [instalado]
Linux 3.16 for 64-bit PCs
linux-image-3.16.0-8-amd64-dbg/oldstable-security 3.16.64-2 amd64
(none)
`
`$ apt policy linux-image-3.16.0-8-amd64
linux-image-3.16.0-8-amd64:
Instalados: 3.16.64-2
Candidato: 3.16.64-2
Tabla de versión:
*** 3.16.64-2 100
-10 http://auto.mirror.devuan.org/merged jessie-security/main amd64
Packages
100 /var/lib/dpkg/status
`
repos:
[...]
deb http://auto.mirror.devuan.org/merged jessie main contrib non-free
deb http://auto.mirror.devuan.org/merged jessie-security main contrib non-free
deb http://auto.mirror.devuan.org/merged jessie-updates main contrib non-free
deb http://auto.mirror.devuan.org/merged jessie-backports main contrib non-free
[...]
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Devuan Jessie security maintenance status
Am Fri, 3 May 2019 12:18:40 -0300
schrieb Gastón via Dng :
> On Fri, May 03, 2019 at 05:03:56PM +0200, Henry Jensen wrote:
> > Am Fri, 3 May 2019 11:52:31 -0300
> > schrieb Gastón via Dng :
> >
> > > On Fri, May 03, 2019 at 03:51:09PM +0200, Henry Jensen via Dng
> > > wrote:
> > > > Hi,
> > > >
> > > > I know that Jessie doesn't get as much attention as stable from
> > > > a security perspective, but is Jessie in Devuan still receiving
> > > > security updates at all? I still have several Devuan Jessie
> > > > boxes, and they didn't got security updates for weeks.
> > > >
> > > > I also have a _Debian_ Jessie box, and this computer got at
> > > > least a few security updates (e.g. kernel/linux-image-*) in the
> > > > last weeks.
> > >
> > > What package do you use?
> > >
> > > `linux-image-{amd64|i386}` or `linux-image-3.16.0-8-{amd64|i386}`?
> > >
> > > I had install the last kernel update manually from jessie-security
> > > repo: `linux-image-3.16.0-8-amd64`
> > >
> > > if do you have `linux-image-{amd64|i386}` it should be autoupdate
> > > with a `apt upgrade`
> >
> >
> > It doesn't.
> >
> > "apt search linux-image-3.16.0-8-amd64" yields no results.
> >
> > My sources.list:
> >
> > deb http://auto.mirror.devuan.org/merged jessie main
> > deb http://deb.devuan.org/merged jessie-security main
>
> `$ apt search linux-image-3.16.0-8-amd64
>
> linux-image-3.16.0-8-amd64/oldstable-security,now 3.16.64-2 amd64
> [instalado] Linux 3.16 for 64-bit PCs
> repos:
>
> [...]
> deb http://auto.mirror.devuan.org/merged jessie main contrib non-free
> deb http://auto.mirror.devuan.org/merged jessie-security main contrib
> non-free deb http://auto.mirror.devuan.org/merged jessie-updates main
> contrib non-free
> deb http://auto.mirror.devuan.org/merged jessie-backports main
> contrib non-free [...]
So, you are using auto.mirror.devuan.org. I did use deb.devuan.org,
according to https://devuan.org/os/etc/apt/sources.list
"IMPORTANT NOTE: auto.mirror is now deprecated and will be
decomissioned. Please make sure you have the latest devuan-keyring
package with apt-get install devuan-keyring and then point
your /etc/apt/sources.list to deb.devuan.org."
Indeed, when I change the sources.list to auto.mirror.devuan.org, I got
updates.
So I guess, the documentation at
https://devuan.org/os/etc/apt/sources.list is wrong?
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Devuan Jessie security maintenance status
On 03/05/19 at 19:31, Henry Jensen via Dng wrote: > Am Fri, 3 May 2019 12:18:40 -0300 > schrieb Gastón via Dng : > >> On Fri, May 03, 2019 at 05:03:56PM +0200, Henry Jensen wrote: >>> >>> It doesn't. >>> >>> "apt search linux-image-3.16.0-8-amd64" yields no results. >>> >>> My sources.list: >>> >>> deb http://auto.mirror.devuan.org/merged jessie main >>> deb http://deb.devuan.org/merged jessie-security main [...] >> repos: >> >> [...] >> deb http://auto.mirror.devuan.org/merged jessie main contrib non-free >> deb http://auto.mirror.devuan.org/merged jessie-security main contrib >> non-free deb http://auto.mirror.devuan.org/merged jessie-updates main >> contrib non-free >> deb http://auto.mirror.devuan.org/merged jessie-backports main >> contrib non-free [...] > > So, you are using auto.mirror.devuan.org. I did use deb.devuan.org, > according to https://devuan.org/os/etc/apt/sources.list > > "IMPORTANT NOTE: auto.mirror is now deprecated and will be > decomissioned. Please make sure you have the latest devuan-keyring > package with apt-get install devuan-keyring and then point > your /etc/apt/sources.list to deb.devuan.org." > > > Indeed, when I change the sources.list to auto.mirror.devuan.org, I got > updates. > > So I guess, the documentation at > https://devuan.org/os/etc/apt/sources.list is wrong? > As you can see from the above, you were missing the jessie-updates repository. Bye, -- Alessandro Selli VOIP SIP: dhatarat...@ekiga.net Chiave firma e cifratura PGP/GPG signing and encoding key: BA651E4050DDFC31E17384BABCE7BD1A1B0DF2AE signature.asc Description: OpenPGP digital signature ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
