Re: sources.list 4 bullseye-security

2021-07-04 Thread Salvatore Bonaccorso
tions) to bump the translation check headers in > the second commit. Okay thanks for pointing that out, was surely not the intention to cause more work. > > Once bullseye will be released the example sources.list entry in > > https://www.debian.org/security/#keeping-secure will

Re: sources.list 4 bullseye-security

2021-07-03 Thread Paul Wise
o have to bump the translation check header. If you first commit the English change and then commit the translation changes, you can use ./smart_change.pl (see --help for instructions) to bump the translation check headers in the second commit. > Once bullseye will be released the example sou

Re: sources.list 4 bullseye-security

2021-07-03 Thread Salvatore Bonaccorso
> > > https://wiki.debian.org/NewInBullseye > > and > > https://www.debian.org/releases/bullseye/errata > > > > disagree about the bullseye-security entry in sources.list. Not to > > mention that the deb-src line is missing on both. > >

Re: sources.list 4 bullseye-security

2021-06-28 Thread Holger Levsen
On Sun, Jun 27, 2021 at 04:52:26PM -0400, Boyuan Yang wrote: > Besides, I believe end users are not supposed to know deb-src line for > security repos. sure, they do! and of course we provide source for our security updates! > Adding such info provides zero benefit except for confusing > users.

Re: sources.list 4 bullseye-security

2021-06-27 Thread Boyuan Yang
eases/bullseye/errata > > disagree about the bullseye-security entry in sources.list. Not to > mention that the deb-src line is missing on both. TL;DR: Both will work: deb http://security.debian.org/debian-security bullseye-security main deb http://security.debian.org/ bullseye-security main Be

Re: What is best practice for managing sources.list for security and stability?

2009-05-26 Thread john
Thanks Thijs, Russ and Dan. I appreciate the insight. John >> >> Is the approach I outlined the "best" way to maintain the security and >> stability of these box's or should I really be using the main >> repositories as well? > > We maintain local mirrors of the main and security repos for the

Re: What is best practice for managing sources.list for security and stability?

2009-05-25 Thread Dan Ritter
the > applications > running on the servers. After I build a box and get my applications > tweaked I usually comment out everything except the security entries > like so: > > cat /etc/apt/sources.list > > #deb http://ftp.us.debian.org/debian/ etch main > #deb-src h

Re: What is best practice for managing sources.list for security and stability?

2009-05-25 Thread Russ Allbery
john writes: > deb http://security.debian.org/ etch/updates main contrib > deb-src http://security.debian.org/ etch/updates main contrib > > The recent key-change forced me to use the main stable repos to get > the new keys (e.g apt-get install debian-archive-keyring ) > . and got me thinking...

Re: What is best practice for managing sources.list for security and stability?

2009-05-25 Thread Thijs Kinkhorst
Hi John, On moandei 25 Maaie 2009, john wrote: > The recent key-change forced me to use the main stable repos to get > the new keys (e.g apt-get install debian-archive-keyring ) > . and got me thinking... > > Is the approach I outlined the "best" way to maintain the security and > stability of th

What is best practice for managing sources.list for security and stability?

2009-05-25 Thread john
tweaked I usually comment out everything except the security entries like so: cat /etc/apt/sources.list #deb http://ftp.us.debian.org/debian/ etch main #deb-src http://ftp.us.debian.org/debian/ etch main deb http://security.debian.org/ etch/updates main contrib deb-src http://security.debian

Re: apt sources.list: inconsistency between sarge and stable

2005-08-30 Thread kurt kuene
nope, there is no difference now, after the update. if it was before i can not tell anymore because i have updated all my hosts... On Tue, 30 Aug 2005 15:46:37 +0100 Sam Morris <[EMAIL PROTECTED]> wrote: > Is there a difference in the output of "apt-cache policy php4" when you > have a 'sarge

Re: apt sources.list: inconsistency between sarge and stable

2005-08-30 Thread Sam Morris
Is there a difference in the output of "apt-cache policy php4" when you have a 'sarge' and a 'stable' line? -- Sam Morris http://robots.org.uk/ PGP key id 5EA01078 3412 EA18 1277 354B 991B C869 B219 7FDB 5EA0 1078 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe".

apt sources.list: inconsistency between sarge and stable

2005-08-30 Thread kurt kuene
hi i run sarge. there were the php4 (and more) security updates recently. #--- my /etc/apt/sources.list contains this line: deb http://security.debian.org/ sarge/updates main contrib non-free -- now when i make: apt-get update apt-get upgrade it will make the courier upgrade but not the php4

Re: sources.list for potato

2002-06-23 Thread Olaf Meeuwissen
mend that, on occasion a package makes it into > proposed-updates that really should not be installed on a potato reason > for some reason. Uhm, I suggested to *drop* that line from one's sources.list. Surely, you would recommend that if packages in proposed-updates really should not be

Re: sources.list for potato

2002-06-21 Thread vdongen
-Original Message- From: Wichert Akkerman <[EMAIL PROTECTED]> Date: Fri, 21 Jun 2002 16:05:10 +0200 Subject: Re: sources.list for potato > Previously Pavel Minev Penev wrote: > > And there is no > > > > deb http://non-us.debian.org/debian-security unstable/

Re: sources.list for potato

2002-06-21 Thread Wichert Akkerman
Previously Pavel Minev Penev wrote: > And there is no > > deb http://non-us.debian.org/debian-security unstable/updates main > contrib non-free > > , is it? No, and there never will be. Wichert. -- _ /[EMAIL PROTECTED]

Re: sources.list for potato

2002-06-21 Thread Pavel Minev Penev
an.org/debian-security potato/updates main contrib > > non-free > > > > > > is all I need on my sources.list for potato, right? > > > > And when I move to woody someday, just s/potato/woody/, correct? > > For a truly stable Debian system, drop >

Re: sources.list for potato

2002-06-21 Thread Jamie Heilman
Wichert Akkerman wrote: > Previously Olaf Meeuwissen wrote: > > For a truly stable Debian system, drop > > deb http://http.us.debian.org/debian dists/potato-proposed-updates/ > > I wouldn't recommend that, on occasion a package makes it into > proposed-updates that really should not be install

Re: sources.list for potato

2002-06-21 Thread Wichert Akkerman
Previously Olaf Meeuwissen wrote: > For a truly stable Debian system, drop > > deb http://http.us.debian.org/debian dists/potato-proposed-updates/ I wouldn't recommend that, on occasion a package makes it into proposed-updates that really should not be installed on a potato reason for some rea

Re: sources.list for potato

2002-06-20 Thread Olaf Meeuwissen
non-US is being phased out. > > I've seen way too many packages that take too long to get into stable when > there's security holes. That's why you have deb http://security.debian.org/ stable/updates main at the top of your /etc/apt/sources.list, not? -- Olaf Meeuwisse

Re: sources.list for potato

2002-06-20 Thread Olaf Meeuwissen
Geoff Crompton <[EMAIL PROTECTED]> writes: > > Oops! I confused the "crypto in main" issue with non-US being phased > > out. Of course, the patented bits will stay in non-US so it will not > > disappear in the foreseeable future. > > What is the 'cypto in main' issue? (Or better, have you got

Re: sources.list for potato

2002-06-20 Thread Geoff Crompton
On Fri, 21 Jun 2002 00:36, Olaf Meeuwissen wrote: > Geoff Crompton <[EMAIL PROTECTED]> writes: > > On Thu, 20 Jun 2002 23:22, Olaf Meeuwissen wrote: > > > (wait for official release updates) and then just s/potato/stable/g. > > > Note that non-US is being phased out. > > > > Can you point me to t

Re: sources.list for potato

2002-06-20 Thread Olaf Meeuwissen
Geoff Crompton <[EMAIL PROTECTED]> writes: > On Thu, 20 Jun 2002 23:22, Olaf Meeuwissen wrote: > > (wait for official release updates) and then just s/potato/stable/g. > > Note that non-US is being phased out. > > Can you point me to the mail-archive thread that discusses this?(I haven't > bee

Re: sources.list for potato

2002-06-20 Thread Mike Dresser
> For a truly stable Debian system, drop > > deb http://http.us.debian.org/debian dists/potato-proposed-updates/ > > (wait for official release updates) and then just s/potato/stable/g. > Note that non-US is being phased out. I've seen way too many packages that take too long to get into stable

Re: sources.list for potato

2002-06-20 Thread Geoff Crompton
On Thu, 20 Jun 2002 23:22, Olaf Meeuwissen wrote: > (wait for official release updates) and then just s/potato/stable/g. > Note that non-US is being phased out. Can you point me to the mail-archive thread that discusses this?(I haven't been following debian lists for very long). Cheers Geo

Re: sources.list for potato

2002-06-20 Thread Olaf Meeuwissen
potato/non-US main contrib > non-free > deb http://non-us.debian.org/debian-security potato/updates main contrib > non-free > > deb http://security.debian.org/debian-security potato/updates main contrib > non-free > > > is all I need on my sources.list for potato, right

sources.list for potato

2002-06-20 Thread Mike Dresser
/updates main contrib non-free deb http://security.debian.org/debian-security potato/updates main contrib non-free is all I need on my sources.list for potato, right? And when I move to woody someday, just s/potato/woody/, correct? Mike -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a

Re: Two questions about /etc/apt/sources.list

2001-10-23 Thread Steven Barker
On Tue, Oct 23, 2001 at 04:51:13PM +0800, Zhenguang Mo (163) wrote: > thanks for your help. > basicaly, the following three line is good enough to keep my potato debian > up to date? > > deb http://http.us.debian.org/debian stable main contrib non-free > (#for standard us debian) > deb http://non-

Re: Two questions about /etc/apt/sources.list

2001-10-23 Thread Steven Barker
On Tue, Oct 23, 2001 at 04:51:13PM +0800, Zhenguang Mo (163) wrote: > thanks for your help. > basicaly, the following three line is good enough to keep my potato debian > up to date? > > deb http://http.us.debian.org/debian stable main contrib non-free > (#for standard us debian) > deb http://non

RE: Two questions about /etc/apt/sources.list

2001-10-23 Thread Zhenguang Mo \(163\)
, 2001 4:06 PM To: debian-security@lists.debian.org Subject: Re: Two questions about /etc/apt/sources.list On Tue, Oct 23, 2001 at 02:43:48PM +0800, Zhenguang Mo (163) wrote: > Hi, > > Q1: > is http://security.debian.org/dists/ and > http://security.debian.org/debian-security/

Re: Two questions about /etc/apt/sources.list

2001-10-23 Thread Steven Barker
n't get non-us security updates by putting deb http://security.debian.org/debian-non-US potato/non-US main in sources.list because that is the same as the line deb http://non-us.debian.org/debian-non-US potato/non-US main which I presume you already have. I think (and I hope somebody will

Two questions about /etc/apt/sources.list

2001-10-23 Thread Zhenguang Mo \(163\)
Hi, Q1: is http://security.debian.org/dists/ and http://security.debian.org/debian-security/dists/ the same thing? Q2: do i also need to have a line saying deb http://security.debian.org/debian-non-US potato/non-US main contrib non-free for non-us update? thanks Mo

RE: Two questions about /etc/apt/sources.list

2001-10-23 Thread Zhenguang Mo (163)
23, 2001 4:06 PM To: [EMAIL PROTECTED] Subject: Re: Two questions about /etc/apt/sources.list On Tue, Oct 23, 2001 at 02:43:48PM +0800, Zhenguang Mo (163) wrote: > Hi, > > Q1: > is http://security.debian.org/dists/ and > http://security.debian.org/debian-security/dists/ the s

Re: Two questions about /etc/apt/sources.list

2001-10-23 Thread Steven Barker
n't get non-us security updates by putting deb http://security.debian.org/debian-non-US potato/non-US main in sources.list because that is the same as the line deb http://non-us.debian.org/debian-non-US potato/non-US main which I presume you already have. I think (and I hope somebody will

Two questions about /etc/apt/sources.list

2001-10-22 Thread Zhenguang Mo (163)
Hi, Q1: is http://security.debian.org/dists/ and http://security.debian.org/debian-security/dists/ the same thing? Q2: do i also need to have a line saying deb http://security.debian.org/debian-non-US potato/non-US main contrib non-free for non-us update? thanks Mo -- To UNSUBSC

Re: apt sources.list

2001-08-21 Thread Daniel Jacobowitz
On Tue, Aug 21, 2001 at 09:36:02AM -0700, Jeff Coppock wrote: >Can I get a few recommendations on the proper sources.list for >a system running woody, that includes the security updates? I >recently did an apt-get update && apt-get upgrade and the >se

Re: apt sources.list

2001-08-21 Thread Daniel Jacobowitz
On Tue, Aug 21, 2001 at 09:36:02AM -0700, Jeff Coppock wrote: >Can I get a few recommendations on the proper sources.list for >a system running woody, that includes the security updates? I >recently did an apt-get update && apt-get upgrade and the >se

Re: apt sources.list

2001-08-21 Thread Steven James
:36:02AM -0700, Jeff Coppock wrote: > > > > >Can I get a few recommendations on the proper sources.list for a > > >system running woody, that includes the security updates? > > > > Woody would be my last choice for a automagically secure > installation: &

Re: apt sources.list

2001-08-21 Thread Philipp Schulte
On Tue, Aug 21, 2001 at 01:24:16PM -0700, Jeff Coppock wrote: >I feel a bit stuck with woody though, since I want to use >iptables instead of ipchains. I think I'll remove the >security source until I figure out a better way. It is possible to run kernel 2.4.x (with iptables) on a p

Re: apt sources.list

2001-08-21 Thread Eric N. Valor
At 01:24 PM 8/21/2001 -0700, Jeff Coppock wrote: Mike Renfro, 2001-Aug-21 14:40 -0500: > On Tue, Aug 21, 2001 at 09:36:02AM -0700, Jeff Coppock wrote: > > >Can I get a few recommendations on the proper sources.list for a > >system running woody, that includes th

Re: apt sources.list

2001-08-21 Thread Hubert Chan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > "Jeff" == Jeff Coppock <[EMAIL PROTECTED]> writes: Jeff>I feel a bit stuck with woody though, since I want to use Jeff> iptables instead of ipchains. I think I'll remove the security Jeff> source until I figure out a better way. Adrian Bun

Re: apt sources.list

2001-08-21 Thread Jeff Coppock
Mike Renfro, 2001-Aug-21 14:40 -0500: > On Tue, Aug 21, 2001 at 09:36:02AM -0700, Jeff Coppock wrote: > > >Can I get a few recommendations on the proper sources.list for a > >system running woody, that includes the security updates? > > Woody would be my last ch

Re: apt sources.list

2001-08-21 Thread Mike Renfro
On Tue, Aug 21, 2001 at 09:36:02AM -0700, Jeff Coppock wrote: >Can I get a few recommendations on the proper sources.list for a >system running woody, that includes the security updates? Woody would be my last choice for a automagically secure installation: * it gets no packages

Re: apt sources.list

2001-08-21 Thread Steven James
:36:02AM -0700, Jeff Coppock wrote: > > > > >Can I get a few recommendations on the proper sources.list for a > > >system running woody, that includes the security updates? > > > > Woody would be my last choice for a automagically secure > installation: &

Re: apt sources.list

2001-08-21 Thread Philipp Schulte
On Tue, Aug 21, 2001 at 01:24:16PM -0700, Jeff Coppock wrote: >I feel a bit stuck with woody though, since I want to use >iptables instead of ipchains. I think I'll remove the >security source until I figure out a better way. It is possible to run kernel 2.4.x (with iptables) on a

Re: apt sources.list

2001-08-21 Thread Eric N. Valor
At 01:24 PM 8/21/2001 -0700, Jeff Coppock wrote: >Mike Renfro, 2001-Aug-21 14:40 -0500: > > On Tue, Aug 21, 2001 at 09:36:02AM -0700, Jeff Coppock wrote: > > > > >Can I get a few recommendations on the proper sources.list for a > > >system running woody, t

Re: apt sources.list

2001-08-21 Thread Stig Brautaset
* Jeff Coppock <[EMAIL PROTECTED]> spake thus: >Can I get a few recommendations on the proper sources.list for >a system running woody, that includes the security updates? I >recently did an apt-get update && apt-get upgrade and the >security updates caus

Re: apt sources.list

2001-08-21 Thread Hubert Chan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > "Jeff" == Jeff Coppock <[EMAIL PROTECTED]> writes: Jeff>I feel a bit stuck with woody though, since I want to use Jeff> iptables instead of ipchains. I think I'll remove the security Jeff> source until I figure out a better way. Adrian Bu

apt sources.list

2001-08-21 Thread Jeff Coppock
Can I get a few recommendations on the proper sources.list for a system running woody, that includes the security updates? I recently did an apt-get update && apt-get upgrade and the security updates cause dependancy issues that I couldn't recover from and made my syst

Re: apt sources.list

2001-08-21 Thread Jeff Coppock
Mike Renfro, 2001-Aug-21 14:40 -0500: > On Tue, Aug 21, 2001 at 09:36:02AM -0700, Jeff Coppock wrote: > > >Can I get a few recommendations on the proper sources.list for a > >system running woody, that includes the security updates? > > Woody would be my last ch

Re: apt sources.list

2001-08-21 Thread Mike Renfro
On Tue, Aug 21, 2001 at 09:36:02AM -0700, Jeff Coppock wrote: >Can I get a few recommendations on the proper sources.list for a >system running woody, that includes the security updates? Woody would be my last choice for a automagically secure installation: * it gets no packages

Re: apt sources.list

2001-08-21 Thread Stig Brautaset
* Jeff Coppock <[EMAIL PROTECTED]> spake thus: >Can I get a few recommendations on the proper sources.list for >a system running woody, that includes the security updates? I >recently did an apt-get update && apt-get upgrade and the >security updates ca

apt sources.list

2001-08-21 Thread Jeff Coppock
Can I get a few recommendations on the proper sources.list for a system running woody, that includes the security updates? I recently did an apt-get update && apt-get upgrade and the security updates cause dependancy issues that I couldn't recover from and m

Re: sources.list

2001-02-13 Thread Jerome Demeyer
acomo Mulas <[EMAIL PROTECTED]> To: security debian Sent: Tuesday, February 13, 2001 11:41 AM Subject: Re: sources.list > On Sat, 10 Feb 2001, Duane Powers wrote: > > > I have a question - I have a dozen boxen that I am maintaining, all with > > Debian ( almost all potato

Re: sources.list

2001-02-13 Thread Giacomo Mulas
On Sat, 10 Feb 2001, Duane Powers wrote: > I have a question - I have a dozen boxen that I am maintaining, all with > Debian ( almost all potato - one woody) I would like to save bandwidth > and centralize administration by utilizing one of the boxes as a apt-get > source. then I can apt-get up

Re: sources.list

2001-02-13 Thread Jerome Demeyer
acomo Mulas <[EMAIL PROTECTED]> To: security debian <[EMAIL PROTECTED]> Sent: Tuesday, February 13, 2001 11:41 AM Subject: Re: sources.list > On Sat, 10 Feb 2001, Duane Powers wrote: > > > I have a question - I have a dozen boxen that I am maintaining, all with > &g

Re: sources.list

2001-02-13 Thread Giacomo Mulas
On Sat, 10 Feb 2001, Duane Powers wrote: > I have a question - I have a dozen boxen that I am maintaining, all with > Debian ( almost all potato - one woody) I would like to save bandwidth > and centralize administration by utilizing one of the boxes as a apt-get > source. then I can apt-get u

Re: sources.list

2001-02-12 Thread Fraser Campbell
Duane Powers <[EMAIL PROTECTED]> writes: > I have a question - I have a dozen boxen that I am maintaining, all with > Debian ( almost all potato - one woody) I would like to save bandwidth > and centralize administration by utilizing one of the boxes as a apt-get > source. then I can apt-get up

Re: sources.list

2001-02-12 Thread Fraser Campbell
Duane Powers <[EMAIL PROTECTED]> writes: > I have a question - I have a dozen boxen that I am maintaining, all with > Debian ( almost all potato - one woody) I would like to save bandwidth > and centralize administration by utilizing one of the boxes as a apt-get > source. then I can apt-get u

Re: sources.list

2001-02-11 Thread Duane Powers
-get dist-upgrade ; done, on onebox, and save all the .deb's then use those .deb's for the other boxenwithout actually mirroring the whole debian site.I know it's configurable - I don't know how.I read the man for sources.list, but I don't know how to set up thewebserver to

Re: sources.list

2001-02-11 Thread Duane Powers
en I can apt-get update ; apt-get dist-upgrade ; done, on onebox, and save all the .deb's then use those .deb's for the other boxenwithout actually mirroring the whole debian site.I know it's configurable - I don't know how.I read the man for sources.list, but I don't k

Re: sources.list

2001-02-10 Thread \"CHiPs\"
the boxes as a apt-get > > source. then I can apt-get update ; apt-get dist-upgrade ; done, on one > > box, and save all the .deb's then use those .deb's for the other boxen > > without actually mirroring the whole debian site. > > > > I know it's confi

Re: sources.list

2001-02-10 Thread \"CHiPs\"
one of the boxes as a apt-get > > source. then I can apt-get update ; apt-get dist-upgrade ; done, on one > > box, and save all the .deb's then use those .deb's for the other boxen > > without actually mirroring the whole debian site. > > > > I know it's confi

Re: sources.list

2001-02-10 Thread Matthew H. Ray
; apt-get dist-upgrade ; done, on one > box, and save all the .deb's then use those .deb's for the other boxen > without actually mirroring the whole debian site. > > I know it's configurable - I don't know how. > I read the man for sources.list, but I don'

Re: sources.list

2001-02-10 Thread Rolf Kutz
Duane Powers ([EMAIL PROTECTED]) wrote: > I have a question - I have a dozen boxen that I am maintaining, all with > Debian ( almost all potato - one woody) I would like to save bandwidth > and centralize administration by utilizing one of the boxes as a apt-get > source. then I can apt-get upd

Re: sources.list

2001-02-10 Thread Duane Powers
, and save all the .deb's then use those .deb's for the other boxen without actually mirroring the whole debian site. I know it's configurable - I don't know how. I read the man for sources.list, but I don't know how to set up the webserver to understand the following;

Re: sources.list

2001-02-10 Thread Matthew H. Ray
; apt-get dist-upgrade ; done, on one > box, and save all the .deb's then use those .deb's for the other boxen > without actually mirroring the whole debian site. > > I know it's configurable - I don't know how. > I read the man for sources.list, but I don'

Re: sources.list

2001-02-10 Thread Rolf Kutz
Duane Powers ([EMAIL PROTECTED]) wrote: > I have a question - I have a dozen boxen that I am maintaining, all with > Debian ( almost all potato - one woody) I would like to save bandwidth > and centralize administration by utilizing one of the boxes as a apt-get > source. then I can apt-get up

Re: sources.list

2001-02-10 Thread Duane Powers
, and save all the .deb's then use those .deb's for the other boxen without actually mirroring the whole debian site. I know it's configurable - I don't know how. I read the man for sources.list, but I don't know how to set up the webserver to understand the following;

Re: sources.list

2001-02-08 Thread Matthew Sherborne
I ran apt-setup and it automatically added my local mirrors. I'm not sure if it wipes your previous sources.list though... GBY

Re: sources.list

2001-02-08 Thread Matthew Sherborne
I ran apt-setup and it automatically added my local mirrors. I'm not sure if it wipes your previous sources.list though... GBY -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

sources.list

2001-02-08 Thread Gary Glueckert
I have recently been to the www.debian.org looking for the latest sites to add to my sources.list file. I could not find them even though I know that I have seen them there before. Could anyone give me a hand and let me know what entries to include there. I am currently using: #STABLE deb http

sources.list

2001-02-08 Thread Gary Glueckert
I have recently been to the www.debian.org looking for the latest sites to add to my sources.list file. I could not find them even though I know that I have seen them there before. Could anyone give me a hand and let me know what entries to include there. I am currently using: #STABLE deb http