On Fri, 16 Mar 2018 12:17:58 +0000 KatolaZ <[email protected]> wrote:
[...] >pinpoint any DSA whose patch is *not* > already available in Devuan [...] Ascii packages not yet replaced with patched versions Tue, 13 Mar 2018 09:49:45 +0000 [SECURITY] [DSA 4135-1] samba security update Need: 2:4.5.12+dfsg-2+deb9u2. Got: samba_4.5.12+dfsg-2+deb9u1. Repo: pkgmaster.devuan.org/merged/pool/DEBIAN/main/s/samba Wed, 14 Mar 2018 21:36:51 +0000 [SECURITY] [DSA 4136-1] curl security update Need: 7.52.1-5+deb9u5. Got: curl_7.52.1-5+deb9u4. Repo: pkgmaster.devuan.org/merged/pool/DEBIAN/main/c/curl Wed, 14 Mar 2018 22:50:24 +0100 [SECURITY] [DSA 4137-1] libvirt security update Need: 3.0.0-4+deb9u3. Got: libnss-libvirt_3.0.0-4+deb9u2_amd64.deb Repo: pkgmaster.devuan.org/merged/pool/DEBIAN/main/libv/libvirt Thu, 15 Mar 2018 10:47:18 +0000 [SECURITY] [DSA 4138-1] mbedtls security update Need: 2.4.2-1+deb9u2. Got: libmbedcrypto0_2.4.2-1+deb9u1_amd64.deb Repo: pkgmaster.devuan.org/merged/pool/DEBIAN/main/m/mbedtls Thu, 15 Mar 2018 22:38:18 +0100 [SECURITY] [DSA 4139-1] firefox-esr security update Need: 52.7.1esr-1~deb9u1. Got: firefox-esr_52.6.0esr-1~deb9u1_amd64.deb Repo: pkgmaster.devuan.org/merged/pool/DEBIAN/main/f/firefox-esr Is this helpful? I have compared the patched versions in the DSA with the versions in my local updated apt-mirrored ascii/main repository. At first inspection, the patched packages for ascii 2-13 Mar appear to be available, including the devuan util-linux package, so it would appear that the lag time between the DSA and the patched version appearing in pkgmaster would be between 3 and 5 days. I'll have a go at Jessie over the weekend, but first I'll have to clear some space to mirror it. Thanks for everything leloft _______________________________________________ Dng mailing list [email protected] https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
