Bug#1143180: Install stable-updates by default on Debian

Chris Hofstädtler <[email protected]> Fri, 31 Jul 2026 14:07:34 +0200
Newsgroups gmane.linux.debian.devel.release
Message-ID <amyQBsb65yFoKMBf__22055.1607477077$1785499768$gmane$org@per.namespace.at>
Package: unattended-upgrades
Version: 2.12
Severity: important
X-Debbugs-Cc: [email protected]

Hi,

unattended-upgrades currently does not enable this origin in 
Unattended-Upgrade::Origins-Pattern by default:

//        "origin=Debian,codename=${distro_codename}-updates";

I've asked the Debian Stable Release Managers on IRC how 
stable-updates should be treated and adsb (thanks!) said that 
stable-updates contains packages that should be installed *sooner* 
than a point release, and that the origin is enabled by default in 
d-i.

unattended-upgrades defaults to installing point release updates, so 
it would seem to me that packages from stable-updates should also be 
included.

Not including a patch as the removal of '//' is trivial and I expect 
applying the patch would be more work.

I think changing this should also be considered for trixie, but I 
also expect it might trigger a conffile prompt on many systems. The 
tradeoffs need to be weighed.

Thanks,
Chris