Hi,
On 14/09/2026 18:27, Adam D. Barratt wrote:
On Mon, 2026-09-14 at 07:55 +0200, Sylvain Beucler wrote:
However it seems many files were immediately dropped from
http://security.debian.org/debian-security/pool/updates/
I can't find the logic here, e.g.
[...]
http://security.debian.org/debian-security/pool/updates/main/p/python3.9/
is 404 but
http://security.debian.org/debian-security/pool/updates/main/p/python3.9/python3.9_3.9.2-1%2bdeb11u7_amd64.deb
is still present
The semi-obvious answer is caching. The .deb is not present on any of
the back-end servers from which Fastly fetches content, so the only way
that URL continues to work is because the file is in Fastly's cache.
That could explain it (though I'm wondering how long this lasts, the
above link is still valid for me today).
What's less obvious to me (and users) is why we have a bullseye-security
dist that is valid (updated 2026-09-12), but that references deleted files.
Why were the packages removed before archival, in the first place? :/
This is unexpected.
Cheers!
Sylvain Beucler
Debian LTS Team
