Package: debsecan Version: 0.4.16+nmu1 Severity: wishlist I am running a mixed testing/unstable system and I manually upgrade packages to unstable when a CVE has been fixed in unstable but the fix hasn't yet migrated to testing. I am using pinning to keep most packages at the testing version and have apt preferences set to upgrade packages from unstable within unstable. It would be nice if debsecan could write out an apt preferences file for packages that have a security issue fixed in unstable such that when I do apt-get upgrade I will get the security issues fixed before the packages migrate to testing. This would require some configuration since different folks will be using different pinning but once it is setup it could be very useful.
pabs@chianamo ~ $ cat /etc/apt/preferences.d/system Package: * Pin: release a=testing Pin-Priority: 800 Package: * Pin: release a=unstable Pin-Priority: 700 Package: * Pin: release a=experimental Pin-Priority: 600 -- bye, pabs http://wiki.debian.org/PaulWise
signature.asc
Description: This is a digitally signed message part
