LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Debian
User Name
Password
Debian This forum is for the discussion of Debian Linux.

Notices


Reply
  Search this Thread
Old 07-24-2005, 11:49 AM   #1
Moloko
Member
 
Registered: Mar 2004
Location: Netherlands
Distribution: Debian
Posts: 729

Rep: Reputation: 30
Sarge Security - what's up?


There have been some updates to Sarge from the Security Team, but what about Firefox and Thunderbird for example? Bugreports have been filed against these two addressing the recent security updates from Mozilla, but it seems to take a long time to get into Sarge.

Firefox has 1.0.6 in unstable, but also has dependencies unsuitable for Sarge (e.g. libxinerama1). Thunderbird has a 1.0.6 version for Sarge, but not in the official archive (get it here).

Anyone who knows what is happening?

Last edited by Moloko; 07-24-2005 at 03:26 PM.
 
Old 07-25-2005, 04:54 AM   #2
vharishankar
Senior Member
 
Registered: Dec 2003
Distribution: Debian
Posts: 3,178
Blog Entries: 4

Rep: Reputation: 138Reputation: 138
I've been noticing it for sometime (I'm using "testing") and there has been a definite slowdown in updating repositories with the latest packages for a few weeks now. I don't know why, but I guess some of the package maintainers are on holiday this time of the year.
 
Old 07-25-2005, 08:57 AM   #3
darkleaf
Senior Member
 
Registered: Jun 2004
Location: the Netherlands
Distribution: debian SID
Posts: 2,170

Rep: Reputation: 45
Hmm looks like the sid manager is on holiday too lol. I haven't had any updates on my package list over the weekend. Anyone else noticed this?
 
Old 07-25-2005, 10:42 AM   #4
byte.chaser
Member
 
Registered: Jun 2004
Distribution: debian 3.1 etch
Posts: 76

Rep: Reputation: 15
I have had a few updates since install of testing ( about a month) only about 20'ish I kinda thought there would be more though..
 
Old 07-25-2005, 11:00 AM   #5
darkleaf
Senior Member
 
Registered: Jun 2004
Location: the Netherlands
Distribution: debian SID
Posts: 2,170

Rep: Reputation: 45
Well testing could be slow now as the real upgrades are being tested in sid and experimental now.
 
Old 07-25-2005, 11:03 AM   #6
byte.chaser
Member
 
Registered: Jun 2004
Distribution: debian 3.1 etch
Posts: 76

Rep: Reputation: 15
Quote:
Originally posted by darkleaf
Well testing could be slow now as the real upgrades are being tested in sid and experimental now.
quick question..

is sid and experimental the same or is experimental before unstable/sid ?
 
Old 07-25-2005, 11:39 AM   #7
darkleaf
Senior Member
 
Registered: Jun 2004
Location: the Netherlands
Distribution: debian SID
Posts: 2,170

Rep: Reputation: 45
Experimental is before sid.
 
Old 07-25-2005, 12:51 PM   #8
saman007uk
Member
 
Registered: Dec 2003
Location: ~root
Distribution: Debian
Posts: 364

Rep: Reputation: 33
From: http://www.us.debian.org/News/2005/20050708

Quote:
The Debian project confirms that the security infrastructure for both the current release Debian GNU/Linux 3.1 (alias sarge) and the former release 3.0 (alias woody) is working again. The security team is now able to provide updates on a regular basis again.

There were several issues with the security infrastructure after the release of sarge, that lead to the Debian security team being unable to issue updates to vulnerable packages. These issues have been fully resolved, and the infrastructure is working correctly again.

The Debian project further strongly advises users to not install packages from the sarge-proposed-updates suite as has been advocated by some websites. Those packages are currently under development and may not work properly. In addition, those packages may not provide users with timely security fixes.

The security team will continue to support Debian GNU/Linux 3.0 alias woody until May 2006, or if the security support for the next release, codenamed etch, starts, whatever happens first.
 
Old 07-26-2005, 11:50 AM   #9
ptawe
Member
 
Registered: Mar 2005
Posts: 46

Rep: Reputation: 15
why does that mean ??
Is sarge not supposed to be the current stable which means that it should be safe to upgrade to and it should get security fixes ??



The Debian project further strongly advises users to not install packages from the sarge-proposed-updates suite as has been advocated by some websites. Those packages are currently under development and may not work properly. In addition, those packages may not provide users with timely security fixes.

The security team will continue to support Debian GNU/Linux 3.0 alias woody until May 2006, or if the security support for the next release, codenamed etch, starts, whatever happens first.
 
Old 07-26-2005, 12:22 PM   #10
darkleaf
Senior Member
 
Registered: Jun 2004
Location: the Netherlands
Distribution: debian SID
Posts: 2,170

Rep: Reputation: 45
It's all in the first name. Woody and sarge are getting security updates again. Woody will be supported till etch becomes stable or till may 2006.
 
Old 07-28-2005, 10:41 AM   #11
vharishankar
Senior Member
 
Registered: Dec 2003
Distribution: Debian
Posts: 3,178
Blog Entries: 4

Rep: Reputation: 138Reputation: 138
Still no updates. And it's almost been six days since I made the last update.

Anyone has any idea what's up? Any news?
 
Old 07-28-2005, 12:32 PM   #12
darkleaf
Senior Member
 
Registered: Jun 2004
Location: the Netherlands
Distribution: debian SID
Posts: 2,170

Rep: Reputation: 45
I hear the ftpmaster is away or so and once he'll be back everything should be working again. Not sure though were I read it.
 
Old 07-28-2005, 07:05 PM   #13
McCloud
Member
 
Registered: Sep 2004
Distribution: Debian Etch
Posts: 179

Rep: Reputation: 30
It seems that the FTP master server has been done, should be fixed soon. I read it here .
 
Old 07-28-2005, 08:50 PM   #14
vharishankar
Senior Member
 
Registered: Dec 2003
Distribution: Debian
Posts: 3,178
Blog Entries: 4

Rep: Reputation: 138Reputation: 138
Ah... Thank you.
 
Old 07-29-2005, 09:33 AM   #15
darkleaf
Senior Member
 
Registered: Jun 2004
Location: the Netherlands
Distribution: debian SID
Posts: 2,170

Rep: Reputation: 45
And it looks to be up again
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Sarge 3.1 unstable and security!!hahahaha deepclutch Debian 6 07-27-2005 03:23 AM
[Security Questions] Last Login, how good is this feature for security breach info? t3gah Linux - Security 2 06-14-2005 01:02 AM
Sarge Security updates? microsoft/linux Debian 4 04-30-2005 08:15 PM
Where Sarge Needs Work (some questions too) + Where Sarge Rocks out loud too. ilyanep Debian 6 09-13-2004 05:36 PM
Updating security in Sarge King4lex Debian 12 09-07-2004 06:31 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Debian

All times are GMT -5. The time now is 01:48 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration