as of a today, every time i boot up debian 4.0r2 i get software update balloon and update mgr and get:

libavcodeccvs51

libavformatcvs51

libavutilcvs49

libpostproccvs51

i click apply and a warning about non-authentication and malicious software.......

so i click cancel.

but update software balloon continues to appear every time i boot.

any way to make it go away?

or are these updates safe?

You might want to check for the packages on the Debian pages.
e.g. for libpostproccvs51,
I found the package in debian multimedia repository:
http://debian-multimedia.org/dists/s...tproccvs51.php

Might get that warning because it's not in the official repository? You'll need to read that message carefully I guess.

thanks jacomijn,

but i don't understand your reply.

the question is:

are these updates safe?.........yes or no?

if yes, i'll install......if no, how do i keep from seeing that balloon every time i boot?

What does your sources.list look like? If you only have repos you trust in it, the software it wants to download is most likely safe.

#
# deb cdrom:[Debian GNU/Linux 4.0 r2 _Etch_ - Official i386 NETINST Binary-1 20080103-00:44]/ etch contrib main

deb cdrom:[Debian GNU/Linux 4.0 r2 _Etch_ - Official i386 NETINST Binary-1 20080103-00:44]/ etch contrib main

deb http://mirror.cc.columbia.edu/pub/linux/debian/debian/ etch main
deb-src http://mirror.cc.columbia.edu/pub/linux/debian/debian/ etch main

deb http://security.debian.org/ etch/updates main contrib
deb-src http://security.debian.org/ etch/updates main contrib

deb http://www.debian-multimedia.org etch main

deb http://debian.uchicago.edu/debian/ etch main contrib non-free
deb-src http://debian.uchicago.edu/debian/ etch main contrib non-free


i really don't know anything about these; do they look ok to you?

Sounds like you need to update your gpg keys for the Debian repositories..

aptitude update
aptitude install debian-archive-keyring debian-multimedia-keyring

after you've updated the gpg keys using that command, that message about 'non-authentication and malicious software' should go away..

did that and got this:



# aptitude install debian-archive-keyring debian-multimedia-keyring
Reading package lists... Done
Building dependency tree... Done
Reading extended state information
Initializing package states... Done
Writing extended state information... Done
Reading task descriptions... Done
Building tag database... Done
The following packages are unused and will be REMOVED:
iso-codes libosp5 w3c-dtd-xhtml xulrunner-gnome-support
The following packages have been kept back:
libavcodeccvs51 libavformatcvs51 libavutilcvs49 libpostproccvs51
The following NEW packages will be installed:
debian-multimedia-keyring
0 packages upgraded, 1 newly installed, 4 to remove and 4 not upgraded.
Need to get 13.5kB of archives. After unpacking 9495kB will be freed.
Do you want to continue? [Y/n/?] Y
WARNING: untrusted versions of the following packages will be installed!

Untrusted packages could compromise your system's security.
You should only proceed with the installation if you are certain that
this is what you want to do.

debian-multimedia-keyring

Do you want to ignore this warning and proceed anyway?
To continue, enter "Yes"; to abort, enter "No":



i'm still uncertain about this.....is it safe or not?

problem solved

edit: I was getting the message about untrusted packages even after installing the d-m keyring, running 'aptitude update' seems to have cleared things up for me.