Bug#1041706: debian-handbook: Wrong advice on APT::Default-Release preventing security updates

2023-07-23 Thread Salvatore Bonaccorso
FWIW, there is a related discussion in #1041708, so cross-referencing.

Regards,
Salvatore



Bug#1041706: debian-handbook: Wrong advice on APT::Default-Release preventing security updates

2023-07-22 Thread Daniel Gröber
Package: debian-handbook
Severity: normal
Tags: security
X-Debbugs-Cc: d...@darkboxed.org, Debian Security Team 


Dear Maintainer,

since bullseye[1] setting APT::Default-Release to a plain codename
such as "stable" or "bookworm" will have the disastrous consequence of
preventing security updates to be considered when upgrading.

The debian-handbook talks about Default-Release at:
https://debian-handbook.info/browse/stable/sect.apt-get.html

Please update any references to Default-Release to include the advice
from the bullseye release-notes at [1].

[1]: 
https://www.debian.org/releases/bullseye/amd64/release-notes/ch-information.en.html#security-archive

Thanks,
--Daniel

PS: I think this change of debian-security Codename was a collossal
mistake and I'm looking into getting this fixed properly by changing
the codename to $codename/security but the updated advice should be
safe in the face of that change.

Thanks,
--Daniel