Re: Security update of etch did not update my Kernel. Still vulnerable. Why???

2008-03-10 Thread Daniel Burrows
On Sun, Mar 09, 2008 at 06:01:50PM -0400, Douglas A. Tutty [EMAIL PROTECTED] was heard to say: On Sun, Mar 09, 2008 at 01:52:50PM -0500, Ron Johnson wrote: Every time I see that kind of message, I just pick the real base package that I want. So does this mean that those metapackages don't

Re: Security update of etch did not update my Kernel. Still vulnerable. Why???

2008-03-10 Thread Mitchell Laks
On 18:09 Sun 09 Mar , Mike Bird wrote: On Sun March 9 2008 11:40:57 Mitchell Laks wrote: On 13:57 Sun 09 Mar , Douglas A. Tutty wrote: Do you have the linus-image-2.6 meta-package installed? If you only have an actual linux-image deb installed, it will never be upgraded. The

Re: Security update of etch did not update my Kernel. Still vulnerable. Why???

2008-03-10 Thread Florian Kulzer
On Mon, Mar 10, 2008 at 08:49:04 -0400, Mitchell Laks wrote: On 18:09 Sun 09 Mar , Mike Bird wrote: [...] Sorry Mitchell, there was a slight mistake in the advice given to you. You should not install linux-image-2.6 but rather linux-image-2.6-486 or linux-image-2.6-686 (or one of the

Security update of etch did not update my Kernel. Still vulnerable. Why???

2008-03-09 Thread Mitchell Laks
Hi, I am running a minimal install debian machine as a firewall and I would like to keep it secure and up to date. I included deb http://ftp.us.debian.org/debian/ etch main non-free deb http://security.debian.org etch/update main contrib as the entries in /etc/apt/sources.list and I run

Re: Security update of etch did not update my Kernel. Still vulnerable. Why???

2008-03-09 Thread Graham
On Sun, 9 Mar 2008 13:08:00 -0400 Mitchell Laks [EMAIL PROTECTED] wrote: Hi, I am running a minimal install debian machine as a firewall and I would like to keep it secure and up to date. I included deb http://ftp.us.debian.org/debian/ etch main non-free deb

Re: Security update of etch did not update my Kernel. Still vulnerable. Why???

2008-03-09 Thread Douglas A. Tutty
On Sun, Mar 09, 2008 at 01:08:00PM -0400, Mitchell Laks wrote: I am running a minimal install debian machine as a firewall and I would like to keep it secure and up to date. I included deb http://ftp.us.debian.org/debian/ etch main non-free deb http://security.debian.org etch/update

Re: Security update of etch did not update my Kernel. Still vulnerable. Why???

2008-03-09 Thread Tzafrir Cohen
Unrelated comment: On Sun, Mar 09, 2008 at 01:08:00PM -0400, Mitchell Laks wrote: Hi, I am running a minimal install debian machine as a firewall and I would like to keep it secure and up to date. I included deb http://ftp.us.debian.org/debian/ etch main non-free deb

Re: Security update of etch did not update my Kernel. Still vulnerable. Why???

2008-03-09 Thread Mitchell Laks
On 13:57 Sun 09 Mar , Douglas A. Tutty wrote: Do you have the linus-image-2.6 meta-package installed? If you only have an actual linux-image deb installed, it will never be upgraded. The meta-package will always depend on the most recent version and will be updated at the time that the

Re: Security update of etch did not update my Kernel. Still vulnerable. Why???

2008-03-09 Thread Ron Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/09/08 13:40, Mitchell Laks wrote: On 13:57 Sun 09 Mar , Douglas A. Tutty wrote: Do you have the linus-image-2.6 meta-package installed? If you only have an actual linux-image deb installed, it will never be upgraded. The meta-package

Re: Security update of etch did not update my Kernel. Still vulnerable. Why???

2008-03-09 Thread Mitchell Laks
On 18:37 Sun 09 Mar , Tzafrir Cohen wrote: Do you actually have packages from contrib / non-free? If not, remove those sources and save a few seconds on each update. If you do, you better have non-free updates as well. Tzafrir, Thank you. You have sharp eyes. On this, hopefully

Re: Security update of etch did not update my Kernel. Still vulnerable. Why???

2008-03-09 Thread Mitchell Laks
On 13:52 Sun 09 Mar , Ron Johnson wrote: Every time I see that kind of message, I just pick the real base package that I want. I agree Ron, I would like to select it myself also. However, I kind of thought that when you do apt-get dist-upgrade against security and there is a major

Re: Security update of etch did not update my Kernel. Still vulnerable. Why???

2008-03-09 Thread Daniel Burrows
On Sun, Mar 09, 2008 at 02:40:57PM -0400, Mitchell Laks [EMAIL PROTECTED] was heard to say: On 13:57 Sun 09 Mar , Douglas A. Tutty wrote: Do you have the linus-image-2.6 meta-package installed? If you only have an actual linux-image deb installed, it will never be upgraded. The

Re: Security update of etch did not update my Kernel. Still vulnerable. Why???

2008-03-09 Thread Douglas A. Tutty
On Sun, Mar 09, 2008 at 01:52:50PM -0500, Ron Johnson wrote: On 03/09/08 13:40, Mitchell Laks wrote: I use apt not aptitude ( :( ). I am used to it. When I try to do apt-get install linux-image-2.6 it tell me that it is a virtual package provided by (the long list of packages). You

Re: Security update of etch did not update my Kernel. Still vulnerable. Why???

2008-03-09 Thread Ron Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/09/08 17:01, Douglas A. Tutty wrote: On Sun, Mar 09, 2008 at 01:52:50PM -0500, Ron Johnson wrote: On 03/09/08 13:40, Mitchell Laks wrote: I use apt not aptitude ( :( ). I am used to it. When I try to do apt-get install linux-image-2.6

Re: Security update of etch did not update my Kernel. Still vulnerable. Why???

2008-03-09 Thread Mike Bird
On Sun March 9 2008 11:40:57 Mitchell Laks wrote: On 13:57 Sun 09 Mar , Douglas A. Tutty wrote: Do you have the linus-image-2.6 meta-package installed? If you only have an actual linux-image deb installed, it will never be upgraded. The meta-package will always depend on the most