On Thu, Jan 24, 2019 at 01:13:31PM +0100, Alexander Bochmann wrote:
> ...on Wed, Jan 23, 2019 at 11:54:10PM +0100, KatolaZ wrote:
>
> > explained in the email I forwarded. Or, if you trust Devuan, to use
> > pkgmaster.devuan.org in your sources.list (that one is the master
> > Devuan repo, and is on a machine to which only a reduced number of
>
> Using the usual deb.devuan.org, I've seen this once during my
> last ascii update:
>
> Get:1 http://packages.roundr.devuan.org/merged jessie InRelease [21.8 kB]
>
> Is that something that's expected?
>

Dear Alex,

InRelease files get regerated (and re-signed) by amprolla at every
merge. So they can definitely change from time to time, especially
when there is a security update, as it is the case (notice that the
apt bug has been fixed in jessie as well, as per
https://security-tracker.debian.org/tracker/CVE-2019-3462)

HTH

KatolaZ

-- 
[ ~.,_  Enzo Nicosia aka KatolaZ - Devuan -- Freaknet Medialab  ]  
[     "+.  katolaz [at] freaknet.org --- katolaz [at] yahoo.it  ]
[       @)   http://kalos.mine.nu ---  Devuan GNU + Linux User  ]
[     @@)  http://maths.qmul.ac.uk/~vnicosia --  GPG: 0B5F062F  ] 
[ (@@@)  Twitter: @KatolaZ - skype: katolaz -- github: KatolaZ  ]