-1

What's the best way to keep packages up-to-date (ie with the last security fixes) without worried about major version update ?

For instance, apache2 for squeezeis is 2.2.16 (https://packages.debian.org/source/squeeze/apache2)

However, last apache2 version for the 2.2.x branch is 2.2.27

Test repository can't be used since they use the 2.4.x versions and I'd like to stick on the 2.2.x (to avoid migration issues)

How would you handle this situation and how can I update to 2.2.27 ?

Improve this question
2
  • You understand that generally people backport security fixes right? Looking at only the version number is often meaningless.
    – Zoredache
    Aug 25, 2014 at 15:46
  • So you are saying that package are up to date with security backport and different version names ? However some package don't seem up do date at all (ie last tomcat6 security fix is from 2013 - metadata.ftp-master.debian.org/changelogs//main/t/tomcat6/…)
    – Quentin
    Aug 25, 2014 at 16:02

1 Answer 1

Reset to default
0

Usually just upgrading your packages from native repositories should be enough provided you have security.debian.org repository enabled in /etc/apt/sources.list.

At the moment limited "LTS" support is only available for previous ("oldstable") Debian release codename "squeeze". Read the following page for instructions how to configure your system to pull LTS updates:

From security prospective it is always better to use current Debian release a.k.a. "stable" which perhaps will be better supported than "LTS".

Read more:

Improve this answer
2
  • I'm a bit lost with the security repository, security updates aren't included in the packages.debian.org/squeeze ? So only bug-fixes are included in this repository ?
    – Quentin
    Aug 26, 2014 at 10:09
  • High priority security fixes (only) are shipped through "security.debian.org". Bug and security fixes are shipped through other repositories. See wiki.debian.org/SourcesList and check example "sources.list".
    – Onlyjob
    Aug 27, 2014 at 0:22

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .