Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #198177 > unrolled thread

(finished)Re: how to prevent security update installation during stretch installation

Started byLong Wind <longwind2@yahoo.com>
First post2018-08-02 10:20 +0200
Last post2018-08-04 19:50 +0200
Articles 2 — 2 participants

Back to article view | Back to linux.debian.user

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.


Contents

  (finished)Re: how to prevent security update installation during  stretch installation Long Wind <longwind2@yahoo.com> - 2018-08-02 10:20 +0200
    Re: (finished)Re: how to prevent security update installation during  stretch installation David Christensen <dpchrist@holgerdanske.com> - 2018-08-04 19:50 +0200

#198177 — (finished)Re: how to prevent security update installation during stretch installation

FromLong Wind <longwind2@yahoo.com>
Date2018-08-02 10:20 +0200
Subject(finished)Re: how to prevent security update installation during stretch installation
Message-ID<wigZX-4Uw-3@gated-at.bofh.it>

[Multipart message — attachments visible in raw view] — view raw

 to Matthew Crews:
you have to balance between risk and effort spent to protect your PC.
i don't have files that are so important that i need security update for protection
if i have, i can just copy them to a USB disk
these days 2nd-hand PC are cheap and they meet my needs

to David Christensen: your solutions is complex, and my cdrom is bad. if it's good, i can install by cdrom, with network disconnected. buy a new cdrom? cdrom is cheap, but IMHO internet has replaced cdrom, cdrom isn't useful except installing software.

to all:
it seems that there's no easy answer to my question
i may have to put up with security update
hopefully this time debian 9.5 will not cause trouble
(debian 9.4 with security update has problem)

i'm not interested in spending any more energy on such trivial issue.
Thanks to all who reply!







    On Thursday, August 2, 2018, 2:34:44 AM GMT+8, Matthew Crews <mailinglists@mattcrews.com> wrote:  
 
 On 8/1/18 1:00 AM, Long Wind wrote:
> i don't like security update because i suspect it cause problem (some
> packaged can't be installed) during stretch installation last time
> 
> and i've used linux for a long time and i think it's stable even without
> security update. and installing update always takes time and space, and
> it offer little value

I would beg to differ on the "little value" aspect. If you are still
running Debian 9.0 (and not the latest version, 9.5) you are vulnerable
to Meltdown, Spectre, various web browser exploits, and a whole host of
other issues that are documented here:

https://lists.debian.org/debian-security-announce/2017/threads.html
https://lists.debian.org/debian-security-announce/2018/threads.html

If you suspect a specific package has a problem due to a security
update, I would file a bug against that package. But to blindly
disregard security updates is irresponsible and dangerous.

  

[toc] | [next] | [standalone]


#198263

FromDavid Christensen <dpchrist@holgerdanske.com>
Date2018-08-04 19:50 +0200
Message-ID<wj8QG-3vL-5@gated-at.bofh.it>
In reply to#198177
On 08/02/2018 01:05 AM, Long Wind wrote:
> to David Christensen: your solutions is complex, 

I assume you are referring to "configure your Internet gateway to block 
traffic between the host and the Internet".  Learning about Internet 
gateways in general, and about your gateway in particular, is an 
important system administration skill.  Effort invested here will pay 
many rewards going forward.


> and my cdrom is bad. if it's good, i can install by cdrom, with network disconnected. buy a new cdrom? cdrom is cheap, but IMHO internet has replaced cdrom, cdrom isn't useful except installing software.

I tend to use USB flash drives, as many newer computers no longer 
include optical drives.  But, I do keep optical drives in the older 
machines because their BIOS can be incompatible with bootable USB flash 
drives.


> to all:
> it seems that there's no easy answer to my question
> i may have to put up with security update

It is best to keep your systems up-to-date with respect to security patches.


> hopefully this time debian 9.5 will not cause trouble
> (debian 9.4 with security update has problem)
> 
> i'm not interested in spending any more energy on such trivial issue.
> Thanks to all who reply!

Okay.


David

[toc] | [prev] | [standalone]


Back to top | Article view | linux.debian.user


csiph-web