Debian Bug report logs - #543819
please include security updates in stable installations

Reply or subscribe to this bug.

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Hannes von Haugwitz <hannes@vonhaugwitz.com>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: please include security updates in stable installations

Date: Thu, 27 Aug 2009 09:03:47 +0200

Package: debootstrap
Severity: wishlist

Hi,

when selecting the current stable release as SUITE the resulting system
should contain the security updates for the basic system and the
sources.list should contain the sources for the security repository.

Hannes

Message #10 received at 543819@bugs.debian.org (full text, mbox, reply):

From: Frans Pop <elendil@planet.nl>

To: 543819@bugs.debian.org

Cc: Hannes von Haugwitz <hannes@vonhaugwitz.com>

Subject: Re: Bug#543819: please include security updates in stable installations

Date: Thu, 27 Aug 2009 10:07:25 +0200

tags 543819 wontfix
thanks

On Thursday 27 August 2009, Hannes von Haugwitz wrote:
> when selecting the current stable release as SUITE the resulting system
> should contain the security updates for the basic system and the
> sources.list should contain the sources for the security repository.

I'm afraid this is completely outside the scope of debootstrap. If you 
use "raw" debootstrap, you know in advance that you'll have to *many* 
things afterwards to configure the system into a proper state. One of 
those things is to set up APT correctly and install security updates.

Note that since Lenny Debian Installer does install security updates 
during an installation.

Cheers,
FJP

Message #17 received at 543819@bugs.debian.org (full text, mbox, reply):

From: Jean-Michel Nirgal Vourgère <jmv_deb@nirgal.com>

To: 543819@bugs.debian.org

Subject: Re: debootstrap: please include security updates in stable installations

Date: Tue, 15 Apr 2014 10:55:32 +0200

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Frans Pop wrote:
> tags 543819 wontfix (...) outside the scope of debootstrap (...)

According to debootstrap(8) from testing:

> To setup a wheezy system: debootstrap wheezy ./wheezy-chroot
> http://ftp.us.debian.org/debian

This will result in a very raw wheezy system that include openssl
1.0.1e-2+deb7u4. Adding a security section in the man page, or some
kind of warning, would be nice.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Icedove - http://www.enigmail.net/
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=z51y
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.