It come up recently in the debianfork channel about security updates
and it seems there is no recommendation for this so far and I am
wondering what the correct way to receive security updates in Devuan
is. I'm wondering if security updates are included in merged or if
that's more of a post-release thing.

I've found I can get the critical updates from the Debian security
mirror and upgraded about two dozen packages that way, would this be
the correct way to do things for now?

By having a look on packages.devuan.org I discovered that
jessie-updates and jessie-backports exists there. I was able to upgrade
one package using jessie-updates in my sources.list, would this be a
sane way to get updates? Looking at jessie-backports I notice the
Devuan debootstrap would be replaced by a Debian version, so I guess
it's down to the user to figure out if using a backport is safe.


Cheers,

 
--
Take back your privacy. Switch to www.StartMail.com