[olug] hint: debian apt, upgrade mixed software

[VincentR]

Have they figured out a way to keep disgruntled admins from replacing debian
packages with trojans yet?

I know someone said they were working on adding MD5 checksums and possibly
PGP signature capabilities, but I never heard much more about it...


----- Original Message -----
From: "Brian Wiese" <bwiese at cotse.com>
To: <olug at olug.org>
Sent: Sunday, June 23, 2002 4:30 PM
Subject: [olug] hint: debian apt, upgrade mixed software


> Just thought I'd share something that I finally figured out with debian
> apt, and have been wanting to do for quite a while... install packages in
> debian from different distributions (stable/testing/unstable) while
> maintaining the rest of my system.
>
> The first time I tried to do this, I edited my /etc/apt/soruces.list to
> have unstable sources, instead testing (which I am/was running)... did an
> apt-get install pkgname and I think it screwed up my entire system,
> upgrading me to unstable or something.
>
> So, I finally found the APT-Howto:
> http://www.debian.org/doc/manuals/apt-howto/index.en.html#contents
>
> and how to manage packages of different distros.  So, to upgrade my
> current Apache to the latest 1.3.26 version to fix the much disputed
> (http://online.securityfocus.com/news/493) chunk handling vulnerability
> (http://www.cert.org/advisories/CA-2002-17.html) I guess the following
> simple line worked!!:
>
> root at host:/# apt-get -u -t unstable install apache
>
> So that does the upgrade and the -t option lets you select the distro to
> choose from, though you must have the proper apt sources for the unstable
> package.
>
> other common commands:
>
> dpkg -l <pkgname> = returns info about installed package <pkgname>
> apt-show-versions -p <pkgname>  = see what versions of the package are
> avail
>
> hope this helps someone else, and upgrade those apache installs! =(
>
>   Brian Wiese | bwiese at cotse.com | aim: unolinuxguru
> ------------------------------------------------------
>   GnuPG/PGP key 0x1E820A73 | "FREEDOM!" - Braveheart
>
> -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_
>
> For help contact olug-help at olug.org - run by ezmlm
> to unsubscribe, send mail to olug-unsubscribe at olug.org
> or `mail olug-unsubscribe at olug.org < /dev/null`
> (c)1998-2002 OLUG http://www.olug.org
>
> -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_
>


-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_

For help contact olug-help at olug.org - run by ezmlm
to unsubscribe, send mail to olug-unsubscribe at olug.org
or `mail olug-unsubscribe at olug.org < /dev/null`
(c)1998-2002 OLUG http://www.olug.org

-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_