Am Fri, 3 May 2019 12:18:40 -0300
schrieb Gastón via Dng <dng@???>:

> On Fri, May 03, 2019 at 05:03:56PM +0200, Henry Jensen wrote:
> > Am Fri, 3 May 2019 11:52:31 -0300
> > schrieb Gastón via Dng <dng@???>:
> >
> > > On Fri, May 03, 2019 at 03:51:09PM +0200, Henry Jensen via Dng
> > > wrote:
> > > > Hi,
> > > >
> > > > I know that Jessie doesn't get as much attention as stable from
> > > > a security perspective, but is Jessie in Devuan still receiving
> > > > security updates at all? I still have several Devuan Jessie
> > > > boxes, and they didn't got security updates for weeks.
> > > >

> > > > I also have a _Debian_ Jessie box, and this computer got at
> > > > least a few security updates (e.g. kernel/linux-image-*) in the
> > > > last weeks.     

> > >
> > > What package do you use?
> > >
> > > `linux-image-{amd64|i386}` or `linux-image-3.16.0-8-{amd64|i386}`?
> > >
> > > I had install the last kernel update manually from jessie-security
> > > repo: `linux-image-3.16.0-8-amd64`
> > >
> > > if do you have `linux-image-{amd64|i386}` it should be autoupdate
> > > with a `apt upgrade`
> >
> >
> > It doesn't.
> >
> > "apt search linux-image-3.16.0-8-amd64" yields no results.
> >
> > My sources.list:
> >

> > deb     http://auto.mirror.devuan.org/merged jessie main
> > deb     http://deb.devuan.org/merged jessie-security main  

>
> `$ apt search linux-image-3.16.0-8-amd64
>
> linux-image-3.16.0-8-amd64/oldstable-security,now 3.16.64-2 amd64
> [instalado] Linux 3.16 for 64-bit PCs


> repos:
>
> [...]
> deb http://auto.mirror.devuan.org/merged jessie main contrib non-free
> deb http://auto.mirror.devuan.org/merged jessie-security main contrib
> non-free deb http://auto.mirror.devuan.org/merged jessie-updates main
> contrib non-free
> deb http://auto.mirror.devuan.org/merged jessie-backports main
> contrib non-free [...]


So, you are using auto.mirror.devuan.org. I did use deb.devuan.org,
according to https://devuan.org/os/etc/apt/sources.list

"IMPORTANT NOTE: auto.mirror is now deprecated and will be
decomissioned. Please make sure you have the latest devuan-keyring
package with apt-get install devuan-keyring and then point
your /etc/apt/sources.list to deb.devuan.org."


Indeed, when I change the sources.list to auto.mirror.devuan.org, I got
updates.

So I guess, the documentation at
https://devuan.org/os/etc/apt/sources.list is wrong?