Source: gst-plugins-bad1.0 Version: 1.14.4-1deb10u Severity: normal Dear Maintainer,
the recent gstreamer "bad plugins" security update DSA-4833-1 has to be installed manually, as its version number 1.14.4-1deb10u is seen as lesser than the 1.14.4-1+b1 version in the main repository. Additionally, APT now wants to "upgrade" the package away from the one with the fix back to the one from the main archive. How to reproduce: # apt update # apt full-upgrade Anticipated outcome: gstreamer1.0-plugins-bad libgstreamer-plugins-bad1.0-0 being updated from 1.14.4-1+b1 to 1.14.4-1deb10u Actual outcome: Nothing, and after manually upgrading them, APT suggesting to downgrade from 1.14.4-1deb10u back to 1.14.4-1+b1. -- System Information: Debian Release: 10.7 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 4.19.0-13-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled