[Talk] Home Edition security updates

Important informations about SolydXK including releases notes, forum rules and other anouncements
User avatar
Arjen Balfoort
Site Admin
Posts: 9331
Joined: 26 Jan 2013 19:36
Location: Netherlands
Contact:

Re: [Talk] Home Edition security updates

Postby Arjen Balfoort » 07 Jun 2014 12:12

@zz
Good initiative. Hope this keeps the official thread cleaner.


SolydXK needs you!
Development | Testing | Translations

User avatar
zerozero
Posts: 5373
Joined: 10 Feb 2013 23:37
Location: West Midlands, England
Contact:

Re: [Talk] Home Edition security updates

Postby zerozero » 07 Jun 2014 12:22

Schoelje wrote:@zz
Good initiative. Hope this keeps the official thread cleaner.
that was the idea(l) :)
bliss of ignorance

kyomar
Posts: 72
Joined: 18 Apr 2014 06:41
Location: Japan

Re: [Official Thread] Home Edition security updates

Postby kyomar » 13 Jun 2014 10:02

The new version of dpkg-dev breaks the current version of devscripts (2.14.1), so a new version of that package (2.14.4) has been uploaded as well.
Has this made it into repository? I am asking as I cannot see it in the update manager. I am waiting for this before updating dpkg.

Thank you!

---
[Edit] Moved to [Talk] topic. Please use [Talk] to ask questions.

User avatar
grizzler
Posts: 2180
Joined: 04 Mar 2013 15:45
Location: The Hague, NL

Re: [Talk] Home Edition security updates

Postby grizzler » 13 Jun 2014 10:28

kyomar wrote:
The new version of dpkg-dev breaks the current version of devscripts (2.14.1), so a new version of that package (2.14.4) has been uploaded as well.
Has this made it into repository? I am asking as I cannot see it in the update manager. I am waiting for this before updating dpkg.
The package devscripts 2.14.4 has definitely made it into the security repository.

Code: Select all

p07@asus:~$ apt policy devscripts
devscripts:
  Geïnstalleerd: 2.14.4
  Kandidaat:     2.14.4
  Versietabel:
 *** 2.14.4 0
        500 http://debian.solydxk.com/security/ testing/updates/main amd64 Packages
        100 /var/lib/dpkg/status
     2.14.1 0
        500 http://ftp.nluug.nl/os/Linux/distr/solydxk/debian/production/ testing/main amd64 Packages
Of course, it will only show up in the update manager if you have an older version installed.

P.S. The official thread is not for discussion or questions, so I've asked the moderators to move your message here. It may show up after I've posted this reply.
Frank

SolydX EE 64 - tracking Debian Testing

kyomar
Posts: 72
Joined: 18 Apr 2014 06:41
Location: Japan

Re: [Talk] Home Edition security updates

Postby kyomar » 13 Jun 2014 10:57

Thanks grizzler for moving my post to the wright place and sorry for posting in the official thread. Didn't realize there is a separate thread for this.
Of course, it will only show up in the update manager if you have an older version installed.
Ah, okay :o . I thought I am having the same "old" version. Unfortunately I have no idea how to check which version is installed (newbie). Anyway I will update and see what happens.

Thanks again for the quick reply - much appreciated.

User avatar
ScottQuier
Posts: 1781
Joined: 18 Jul 2013 15:55
Location: Newport News, VA

Re: [Talk] Home Edition security updates

Postby ScottQuier » 13 Jun 2014 11:08

The command

Code: Select all

apt policy <package>
will list what is installed and what is available. See grizzler's post for an example.

Or this from my machine shows that I don't (yet?) hve devscripts installed but that there's a version available:

Code: Select all

apt policy devscripts
devscripts:
  Installed: (none)
  Candidate: 2.14.4
  Version table:
     2.14.4 0
        500 http://debian.solydxk.com/security/ testing/updates/main amd64 Packages
     2.14.1 0
        500 http://debian.solydxk.com/production/ testing/main amd64 Packages
Scott
Quoting zerozero, "The usage of PPA's in debian-based
systems is risky at best and entails serious compatibility
problems; usually it's the best way to destroy an install"

User avatar
zerozero
Posts: 5373
Joined: 10 Feb 2013 23:37
Location: West Midlands, England
Contact:

Re: Home Edition security updates

Postby zerozero » 14 Jun 2014 00:40

grizzler wrote: Could I ask some 'fellow security update testers' to temporarily switch to Debian Testing once 3.14.5-1 gets there, install the new kernel binaries and report back before I upload the lot to the security updates repository?
not yet in testing, grabbed it from sid

Code: Select all

linux-image-3.14-1-amd64:
  Installed: 3.14.5-1
  Candidate: 3.14.5-1
  Version table:
 *** 3.14.5-1 0
        100 /var/lib/dpkg/status
     3.14.4-1 0
        500 http://debian.solydxk.com/security/ testing/updates/main amd64 Packages
reporting that fglrx works

Code: Select all

zerozero@xfce:~$ uname -a;inxi -Gxx
Linux xfce 3.14-1-amd64 #1 SMP Debian 3.14.5-1 (2014-06-05) x86_64 GNU/Linux
Graphics:  Card: Advanced Micro Devices [AMD/ATI] Wrestler [Radeon HD 7340]
           bus-ID: 00:01.0 chip-ID: 1002:9808
           Display Server: X.Org 1.15.0 driver: fglrx
           Resolution: 1366x768@60.0hz
           GLX Renderer: AMD Radeon HD 7340 Graphics
           GLX Version: 4.4.12874 - CPC 14.10.1006.1001 Direct Rendering: Yes
bliss of ignorance

User avatar
grizzler
Posts: 2180
Joined: 04 Mar 2013 15:45
Location: The Hague, NL

Re: [Talk] Home Edition security updates

Postby grizzler » 14 Jun 2014 10:14

Thanks for checking. I've already done my machines (Intel graphics) as well, so whenever the update gets through, it can be uploaded straight away. If 3.14.5-1 is the one that migrates to testing after all. The way things are going I wouldn't be surprised if a 3.14.5-2 showed up in unstable...
Frank

SolydX EE 64 - tracking Debian Testing

User avatar
zerozero
Posts: 5373
Joined: 10 Feb 2013 23:37
Location: West Midlands, England
Contact:

Re: [Talk] Home Edition security updates

Postby zerozero » 14 Jun 2014 10:24

now that you mention it, Ben was to upload a couple days ago 3.14.7 so we might as well just skip .5 altogether
https://lists.debian.org/debian-kernel/ ... 00131.html
bliss of ignorance

User avatar
grizzler
Posts: 2180
Joined: 04 Mar 2013 15:45
Location: The Hague, NL

Re: [Talk] Home Edition security updates

Postby grizzler » 14 Jun 2014 10:35

Indeed. It looks like he didn't do the upload yet, though. Latest tracking news is still about the 3.14.5-1 one: http://packages.qa.debian.org/l/linux.html

I wonder what urgency will be 'attached' to that upload. If it isn't 'high' it will be at least another five days before it moves to testing. If it's 'medium' that is. If it's 'low' (i.e. ten days delay), we might as well wait for the next UP...
Frank

SolydX EE 64 - tracking Debian Testing

User avatar
grizzler
Posts: 2180
Joined: 04 Mar 2013 15:45
Location: The Hague, NL

Re: [Talk] Home Edition security updates

Postby grizzler » 16 Jun 2014 16:09

zerozero wrote:now that you mention it, Ben was to upload a couple days ago 3.14.7 so we might as well just skip .5 altogether
https://lists.debian.org/debian-kernel/ ... 00131.html
3.14.7-1 has arrived in unstable today. Urgency medium. I'm going to pick it up later and run some tests.
Frank

SolydX EE 64 - tracking Debian Testing

User avatar
zerozero
Posts: 5373
Joined: 10 Feb 2013 23:37
Location: West Midlands, England
Contact:

Re: [Talk] Home Edition security updates

Postby zerozero » 16 Jun 2014 22:33

Code: Select all

zerozero@xfce:~$ uname -a;inxi -Gxx
Linux xfce 3.14-1-amd64 #1 SMP Debian 3.14.7-1 (2014-06-16) x86_64 GNU/Linux
Graphics:  Card: Advanced Micro Devices [AMD/ATI] Wrestler [Radeon HD 7340]
           bus-ID: 00:01.0 chip-ID: 1002:9808
           Display Server: X.Org 1.15.0 driver: fglrx
           Resolution: 1366x768@60.0hz
           GLX Renderer: AMD Radeon HD 7340 Graphics
           GLX Version: 4.4.12874 - CPC 14.10.1006.1001 Direct Rendering: Yes
zerozero@xfce:~$ 
it doesn't break fglrx
bliss of ignorance

User avatar
grizzler
Posts: 2180
Joined: 04 Mar 2013 15:45
Location: The Hague, NL

Re: [Talk] Home Edition security updates

Postby grizzler » 17 Jun 2014 06:28

Thanks. No problems on my system either (not that I expected any...).
Frank

SolydX EE 64 - tracking Debian Testing

User avatar
grizzler
Posts: 2180
Joined: 04 Mar 2013 15:45
Location: The Hague, NL

Re: [Talk] Home Edition security updates

Postby grizzler » 19 Jun 2014 15:17

After reading this, I checked whether 3.14.7-1 really had migrated to Testing. It definitely has, though the tracking page indicates it hasn't yet.
I don't know whether fleabus has time to test it with nvidia graphics, but I don't really expect problems there either, so I'll upload it as soon as the tracking page changes.
Frank

SolydX EE 64 - tracking Debian Testing

User avatar
zerozero
Posts: 5373
Joined: 10 Feb 2013 23:37
Location: West Midlands, England
Contact:

Re: [Talk] Home Edition security updates

Postby zerozero » 19 Jun 2014 23:19

it went smooth here

Code: Select all

zerozero@home ~ $ uname -a; inxi -Gxx
Linux home 3.14-1-amd64 #1 SMP Debian 3.14.7-1 (2014-06-16) x86_64 GNU/Linux
Graphics:  Card: Intel Xeon E3-1200 v2/3rd Gen Core processor Graphics Controller
           bus-ID: 00:02.0 chip-ID: 8086:0162
           Display Server: X.Org 1.15.0 driver: intel Resolution: 1440x900@59.9hz
           GLX Renderer: Mesa DRI Intel Ivybridge Desktop GLX Version: 3.0 Mesa 10.1.0 Direct Rendering: Yes
zerozero@home ~ $ 
tho i wasn't expecting problems
bliss of ignorance

User avatar
dlw
Posts: 12
Joined: 17 Jan 2014 02:23
Location: suburbs of Washington, D.C., USA

Re: [Talk] Home Edition security updates

Postby dlw » 03 Jul 2014 22:06

I think this is a complaint, a congratulation, and a confession of ignorance all rolled into one post. I don't get to play with SolydX as often as I'd like to -- now that gnucash runs under Win7 everything I need is on that other OS. I have SolydX running as a virtual machine and whenever I can find the time I rummage around and marvel at how much improvement there's been since I first installed SuSE 4.x.

What this means is that every time I run SolydX I look for upgrades. I've learned that if the little icon at the bottom is a check, it doesn't mean that there are no updates - - it means that the current version of the update manager thinks that it has done its job. So yesterday I clicked it. It downloaded a new version of itself, so I ran that and it downloaded a good number of files and installed them. Now because I've been through this before (and I really like the idea of incremental updates), I have my conky set to tell me what the current installed update level is (essentially showing the contents of /usr/lib/solydxk/updatemanager/files/updatemanager.hist ). There was no change: it still indicated up=2014.04.15.

I also have the latest three SolydXK News item titles from the rss feed shown on my conky, so I knew about the security updates. I followed the link ( http://forums.solydxk.nl/viewtopic.php?f=2&t=3949 )in the "Home Edition security updates" news item, but discovered that "the requested topic does not exist". Searching the forum eventually led me to the threads that address the packages that were so quickly fixed and uploaded to the servers. Unfortunately, I could find no list of the packages that had been changed. I had to comb the version numbers of the fixed package out of the posted text, then use Synaptic to see if those versions were installed on my system.

So you can see where the congratulations are coming from: you did a quick, professional job of ensuring that SolydX was protected from all known threats. And the complaint: it took me a good deal of time to be sure that this was true -- it would have been easier for me if the entry in updatemanager.hist changed. And the confession of ignorance? You've just read it.

Again, thanks for all the work you put into maintenance. I appreciate it, and keep recommending Solydx to friends who have become dissatisfied with their distributions.
SolydX64 under VirtualBox on a Lenovo T530 . . . yes, Win7 is involved.

User avatar
MAYBL8
Posts: 1487
Joined: 10 Mar 2013 18:41
Location: Maryland Heights, MO USA
Contact:

Re: [Official Thread] Home Edition security updates

Postby MAYBL8 » 10 Jul 2014 14:34

I think this security update process is a great idea.
I don't know if the other distros are doing this but this is a plus for Solydxk.
We should promote this feature if we aren't already.
This process alone could bring in new users to Solydxk I would believe.

Thanks Grizzler for doing this work.


belgiumsolydk
Posts: 73
Joined: 06 Mar 2014 12:17
Location: Erpe-Mere Belgium

Re: [Official Thread] Home Edition security updates

Postby belgiumsolydk » 10 Jul 2014 15:14

just to say : THANKS for the swift updates!

kurotsugi
Posts: 2240
Joined: 09 Jan 2014 00:17

Re: [Talk] Home Edition security updates

Postby kurotsugi » 10 Jul 2014 16:14

I don't know how manjaro handles their security updates but as a debian derivatives, AFAIK we're the only one distro with semi rolling release scheme with regular security updates. is there any debian derivatives with UP system aside from solydxk and LMDE?

User avatar
wyrdoak
Posts: 113
Joined: 07 Jan 2014 21:25

Re: [Talk] Home Edition security updates

Postby wyrdoak » 12 Jul 2014 00:59

grizzler wrote:A security update for dbus has been uploaded.

Debian Security Advisory: https://www.debian.org/security/2014/dsa-2971
Package Tracking System : http://packages.qa.debian.org/d/dbus.html

This should be available a the top of the hour.

I don't know if it's just me, but I finally rebooted after this update and the wifi didn't come back on line until I did a shutdown and waited 15sec's, then booted. Even with the cooling pad I need to reboot this netbook at least every three days or so or the graphics start doing weird things. :lol:

Code: Select all

Card-1: Qualcomm Atheros AR9285 Wireless Network Adapter (PCI-Express) driver: ath9k
           IF: wlan0 state: up mac: 

Acer Aspire One AO532h; CPU Atom n450 1.66Gh: 2GB RAM, duel boot with Win7: SolydK32


Return to “News & Anouncements”

Who is online

Users browsing this forum: No registered users and 5 guests