-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On Mon, 13 Apr 2020 14:50:59 +0300
Dimitris via Dng <dng@???> wrote:

> 68.7 is in beowulf-proposed-updates repos :
> https://pkginfo.devuan.org/cgi-bin/d1pkgweb-query?search=firefox-esr&release=beowulf
>
> although, i think it should be in beowulf-security.. (?)

Repeatedly I found security.debian.org to be several days ahead of
Devuan's security repos, which (according to 'apt-cache policy') at the
moment provides firefox-esr version 68.6.1 for beowulf.

When adding security.debian.org to the sources list, it could make
sense to have pinning rules like the following in /etc/apt/preferences
to prevent unwanted modifications: 

    Package: systemd-sysv
    Pin: release o=*
    Pin-Priority: -1

    Package: systemd
    Pin: release o=*
    Pin-Priority: -1

Regarding the "proposed-updates" mechanism, the _Debian_ documentation
states: 

    "It should be noted that packages from security.debian.org
    are copied into the p-u-new (o-p-u-new) directory
    automatically. At the same time, packages that are uploaded
    directly to proposed-updates (oldstable-proposed-updates) are
    not monitored by the Debian security team." [1]


libre Grüße,
Florian


[1] https://www.debian.org/releases/proposed-updates
-----BEGIN PGP SIGNATURE-----
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=NtR4
-----END PGP SIGNATURE-----