CrunchBang Linux

dhave

Member

Registered: 2012-11-05

Posts: 24

[SOLVED] How to manage security updates for sid (or lack thereof)

Crunchbang (and Debian) noob here. I'm running waldorf (15oct12) and have just switched to sid. (If it ain't broke, keep tweaking till it does, right?)

I ran across this in the sid docs  (http://www.debian.org/releases/sid/):

'Please note that security updates for "unstable" distribution are not managed by the security team. Hence, "unstable" does not get security updates in a timely manner.'

(1) Is this why there is no http://security.debian.org/dists/sid/ and its subdirectories?

(2) Should I disable the corresponding repo?

(3) Also, what are the ramifications of not having regular security updates?

Thanks!

Last edited by dhave (2012-11-07 03:49:25)

snowpine

#!-a-roo

Registered: 2008-11-24

Posts: 2,950

Re: [SOLVED] How to manage security updates for sid (or lack thereof)

Security updates would mean updates that are "backported" to Stable from Unstable/Sid. Therefore if you are running Sid you already have them.

---

/hugged

dhave

Member

Registered: 2012-11-05

Posts: 24

Re: [SOLVED] How to manage security updates for sid (or lack thereof)

I think I found the answer here in a Debian FAQ:

"Q: How is security handled for unstable?

A: The short answer is: it's not. Unstable is a rapidly moving target and the security team does not have the resources needed to properly support it. If you want to have a secure (and stable) server you are strongly encouraged to stay with stable."

dhave

Member

Registered: 2012-11-05

Posts: 24

Re: [SOLVED] How to manage security updates for sid (or lack thereof)

Security updates would mean updates that are "backported" to Stable from Unstable/Sid. Therefore if you are running Sid you already have them.

That's an answer I like better than the one I found on my own. Thanks, snowpine. Thread marked "SOLVED".

Last edited by dhave (2012-11-07 03:50:18)

snowpine

#!-a-roo

Registered: 2008-11-24

Posts: 2,950

Re: [SOLVED] How to manage security updates for sid (or lack thereof)

I think I found the answer here in a Debian FAQ:

"Q: How is security handled for unstable?

A: The short answer is: it's not. Unstable is a rapidly moving target and the security team does not have the resources needed to properly support it. If you want to have a secure (and stable) server you are strongly encouraged to stay with stable."

^--- I agree with the recommendation and would not personally use Sid for a server.

---

/hugged

dhave

Member

Registered: 2012-11-05

Posts: 24

Re: [SOLVED] How to manage security updates for sid (or lack thereof)

^--- I agree with the recommendation and would not personally use Sid for a server.

No prob. This is just on my personal laptop.

Last edited by dhave (2012-11-07 04:02:23)