[Bug 1462787] [NEW] Feature request: support for pulling packages from -security and -updates

michagogo 1462787 at bugs.launchpad.net
Sun Jun 7 17:46:11 UTC 2015


*** This bug is a security vulnerability ***

Public security bug reported:

It doesn't really make sense that when using debootstrap to create an
Ubuntu <chroot|container|directory|installation|whatever>, old versions
of packages will be installed, rather than the latest versions from the
archives. The first thing that you'd need to do would be to immediately
go and upgrade everything, which is just unnecessary duplication of
downloading and installing. An Ubuntu installation (for example,
Precise) created by the current version will be extremely insecure.

** Affects: debootstrap (Ubuntu)
     Importance: Undecided
         Status: New

** Information type changed from Private Security to Public

** Information type changed from Public to Public Security

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to debootstrap in Ubuntu.
https://bugs.launchpad.net/bugs/1462787

Title:
  Feature request: support for pulling packages from -security and
  -updates

Status in debootstrap package in Ubuntu:
  New

Bug description:
  It doesn't really make sense that when using debootstrap to create an
  Ubuntu <chroot|container|directory|installation|whatever>, old
  versions of packages will be installed, rather than the latest
  versions from the archives. The first thing that you'd need to do
  would be to immediately go and upgrade everything, which is just
  unnecessary duplication of downloading and installing. An Ubuntu
  installation (for example, Precise) created by the current version
  will be extremely insecure.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/debootstrap/+bug/1462787/+subscriptions



More information about the foundations-bugs mailing list