4 ms·

Any tips for us hobbyist VPS owners running Debian 7? Latest version on a brand new digitalocean instantance is 1.0.1e! No sign of f,g,h,i or today's k.

0x0 12y ago
These patches are included in 1.0.1e-2+deb7u15
staz 12y ago
As 0x0 says they are in 1.0.1e-2+deb7u15 which was just released a few minutes ago. If you would like to know all the security update for debian you can subscribe to the mailing list: debian-security-announce@lists.debian.org See https://www.debian.org/security/ https://www.debian.org/security/ Be warned however that they send mail every few days and you have to read them to know which update is needed on your system. On the other hand you can use Debian automatic upgrade system: unattended-upgrade. Which will update your system for security update. It does so every night so you won't have security update asap but if you update within the day it's generally okay
- eloy 12y ago
  https://filippo.io/psa-enable-automatic-updates-please/ https://filippo.io/psa-enable-automatic-updates-please/ I can also recommend to enable automatic updates. It won't hurt, and if it does, it will be far less than a hacked server can cause in amount of damage.
webjunkie01 12y ago
AFAIK you should look into the "built on:" line. If the date is: Tue Mar 17 21:30:08 UTC 2015, then the the package is already updated.
rlpb 12y ago
Distributions generally backport security fixes, so a plain comparison of upstream version numbers won't generally work. You need to understand your distribution's versioning scheme and check package changelogs. However, distributions generally release updates to their stable releases. Just install them. Installing security updates automatically is even better (better to have the occasional rare regression than a compromise and have to re-deploy the whole server).
gmac 12y ago
IIRC Digital Ocean instances get updates by default from Digital Ocean mirrors that are not always up to date with the source. You may want to switch to the official sources.
- forgottenpass 12y ago
  The default debian droplet configuration is to use Digital Ocean's mirror for the main archive where delay doesn't really matter, and security.debian.org for security updates. That is exactly how you want to be configured.

0x0 12y ago

These patches are included in 1.0.1e-2+deb7u15

staz 12y ago

As 0x0 says they are in 1.0.1e-2+deb7u15 which was just released a few minutes ago. If you would like to know all the security update for debian you can subscribe to the mailing list: debian-security-announce@lists.debian.org See https://www.debian.org/security/ https://www.debian.org/security/ Be warned however that they send mail every few days and you have to read them to know which update is needed on your system. On the other hand you can use Debian automatic upgrade system: unattended-upgrade. Which will update your system for security update. It does so every night so you won't have security update asap but if you update within the day it's generally okay

eloy 12y ago
https://filippo.io/psa-enable-automatic-updates-please/ https://filippo.io/psa-enable-automatic-updates-please/ I can also recommend to enable automatic updates. It won't hurt, and if it does, it will be far less than a hacked server can cause in amount of damage.

webjunkie01 12y ago

AFAIK you should look into the "built on:" line. If the date is: Tue Mar 17 21:30:08 UTC 2015, then the the package is already updated.

rlpb 12y ago

Distributions generally backport security fixes, so a plain comparison of upstream version numbers won't generally work. You need to understand your distribution's versioning scheme and check package changelogs. However, distributions generally release updates to their stable releases. Just install them. Installing security updates automatically is even better (better to have the occasional rare regression than a compromise and have to re-deploy the whole server).

gmac 12y ago

IIRC Digital Ocean instances get updates by default from Digital Ocean mirrors that are not always up to date with the source. You may want to switch to the official sources.

forgottenpass 12y ago
The default debian droplet configuration is to use Digital Ocean's mirror for the main archive where delay doesn't really matter, and security.debian.org for security updates. That is exactly how you want to be configured.