Re: Concerns about Security of packages in Debain OS and the Operating system itself.

Paul Wise <[email protected]> Wed, 25 May 2022 09:10:42 +0800

Newsgroups	gmane.linux.debian.devel.security
Organization	Debian
Message-ID	<[email protected]>

On Tue, 2022-05-24 at 16:27 +0100, piorunz wrote:

> Important note: Disabling bullseye-updates is actually causing
> point-release updates to be delivered on one, predetermined date,
> bundled all together. By disabling this entry you still get them all,
> but in controlled fashion, you are not "beta tester" of these packages.

This is not exactly correct. The bullseye-updates suite should be used
by almost all users. The only suite where you are really a beta tester
for the next point release is bullseye-proposed-updates. The other two
suites recieve only very important updates:

bullseye: read-only except during point releases

bullseye-security: receives security updates regularly

bullseye-updates: receives occasional time-sensitive and important
updates, such as updates to the timezone database, which often happen
just days before the timezone changes, or fixes for packages that get
completely broken by some external services on the Internet, or fixes
for packages that were initially broken but that wasn't found. There
are only three updates in it currently, two of them are updates to the
timezone database and one is clamav, which sometimes needs updates so
it can continue to pull in antivirus detections.

https://deb.debian.org/debian/dists/bullseye-updates/main/source/Sources.xz

bullseye-proposed-updates: the contents of the next point release;
some changes come from bullseye-security, some from bullseye-updates
and some from package maintainers.

https://release.debian.org/proposed-updates/stable.html

-- 
bye,
pabs

https://wiki.debian.org/PaulWise

signature.asc (application/pgp-signature, 833 B)