On Thu, 28 Jan 2016 16:07:00 +0100, Florian wrote in message
<20160128160700.57262036.f.zieboll@???>:

> On Thu, 28 Jan 2016 08:15:01 -0500
> Hendrik Boom <hendrik@???> wrote:
>
> > On Wed, Jan 27, 2016 at 08:03:45PM +0100, Florian Zieboll wrote:
> > >
> > > * In the "configure package manager" section the installer
> > > suggests to choose "security updates" from security.debian.org.
> > > According to a mail on this list from some weeks ago, this is
> > > deprecated.
> >
> > Looks like I missed this. Where should I go for devuan security
> > updates?
>
> Sorry for the confusion, I obviously don't remember correctly that in
> the past weeks somebody had stated this. When searching for that
> specific mail, which I had given up in a first attempt due to a bug I
> just reported, I only found the exact opposite statement:
>
> | On Tue, 05 Jan 2016 11:33:40 +1300
> | Daniel Reurich <daniel@???> wrote:
> |
> | > We are NOT merging backports or updates or security updates.
> |
>
> Perhaps the "NOT" was shouted too loudly for me to hear it ;) So I
> finally added security.debian.org to the sources.list and must confess
> that it was a good idea, as the update pulled quite a lot, including
> rather exposed stuff like bind9-host, claws-mail, curl, iceweasel,
> linux-image-amd64 and openjdk-7-jre...

..and we are sure we didn't fall for another
http://c2.com/cgi/wiki?TheKenThompsonHack ?


..another 2 questions, I have a Debian mirror on my lan (slow
unreliable net), amd64, i386, hurd-i386 and source, and plan
a Devuan mirror, roughly how many .debs do we leave unchanged
from Debian in Devuan?
How do we do compared to https://www.debian.org/mirror/size ?

..I never got any response to my first question here:
https://lists.dyne.org/lurker/message/20151217.015613.57a0b639.en.html

--
..med vennlig hilsen = with Kind Regards from Arnt Karlsen
...with a number of polar bear hunters in his ancestry...
Scenarios always come in sets of three:
best case, worst case, and just in case.