Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #204624 > unrolled thread

I'm a bit confused on how to upgrade to stretch 9.7

Back to article view | Back to linux.debian.user

Contents

  I'm a bit confused on how to upgrade to stretch 9.7 Pete Geenhuizen <pete@geenhuizen.net> - 2019-01-25 18:40 +0100
    Re: I'm a bit confused on how to upgrade to stretch 9.7 Henning Follmann <hfollmann@itcfollmann.com> - 2019-01-25 19:00 +0100
    Re: I'm a bit confused on how to upgrade to stretch 9.7 deloptes <deloptes@gmail.com> - 2019-01-25 19:00 +0100
    Re: I'm a bit confused on how to upgrade to stretch 9.7 Andy Smith <andy@strugglers.net> - 2019-01-25 19:10 +0100
    Re: I'm a bit confused on how to upgrade to stretch 9.7 Kent West <westk@acu.edu> - 2019-01-25 20:20 +0100
      Re: I'm a bit confused on how to upgrade to stretch 9.7 Kent West <westk@acu.edu> - 2019-01-25 20:20 +0100
        Re: I'm a bit confused on how to upgrade to stretch 9.7 Paul Sutton <zleap@disroot.org> - 2019-01-25 20:30 +0100
          Re: I'm a bit confused on how to upgrade to stretch 9.7 Kent West <westk@acu.edu> - 2019-01-25 20:40 +0100
            Re: I'm a bit confused on how to upgrade to stretch 9.7 Andrei POPESCU <andreimpopescu@gmail.com> - 2019-05-25 09:20 +0200
        Re: I'm a bit confused on how to upgrade to stretch 9.7 Brian <ad44@cityscape.co.uk> - 2019-01-25 20:40 +0100
          Re: I'm a bit confused on how to upgrade to stretch 9.7 Kent West <westk@acu.edu> - 2019-01-25 20:50 +0100
        Re: I'm a bit confused on how to upgrade to stretch 9.7 Katnip <katnip62@pm.me> - 2019-01-26 00:50 +0100
          Re: I'm a bit confused on how to upgrade to stretch 9.7 David Wright <deblis@lionunicorn.co.uk> - 2019-01-26 01:40 +0100
            Re: I'm a bit confused on how to upgrade to stretch 9.7 Peter Ehlert <pb21a@sdi-baja.com> - 2019-01-26 02:10 +0100
            Re: I'm a bit confused on how to upgrade to stretch 9.7 Kent West <westk@acu.edu> - 2019-01-26 03:10 +0100
            Re: I'm a bit confused on how to upgrade to stretch 9.7 Katnip <katnip62@pm.me> - 2019-01-26 03:30 +0100
              Re: I'm a bit confused on how to upgrade to stretch 9.7 Kent West <westk@acu.edu> - 2019-01-26 03:40 +0100
    Re: I'm a bit confused on how to upgrade to stretch 9.7 Pete Geenhuizen <pete@geenhuizen.net> - 2019-01-25 21:40 +0100
      Re: I'm a bit confused on how to upgrade to stretch 9.7 Default User <hunguponcontent@gmail.com> - 2019-01-25 21:50 +0100

#204624 — I'm a bit confused on how to upgrade to stretch 9.7

[Multipart message — attachments visible in raw view] — view raw

I am mainly a Centos user and am quite a novice when it comes to Debian 
and I have a computer which is currently running Stretch 9.6 and I 
recently install apt 1.4.9.

With the release of Stretch 9.7 and because of the recent vulnerability 
discovered in apt I'm not sure how to proceed.

According to the instructions in the Debian Security Advisory they 
advise disabling redirects which might
"break some proxies when used against security.debian.org", not sure 
exactly what this means to me,

and further on it says "For the stable distribution (stretch), this 
problem has been fixed in version 1.4.9"

I just don't know what direction I should take, so I'd appreciate some 
insight and pointers on how I should proceed.

Thanks

Pete


-- 
Unencumbered by the thought process.
  -- Click and Clack the Tappet brothers


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

[toc] | [next] | [standalone]

#204625

On Fri, Jan 25, 2019 at 12:23:27PM -0500, Pete Geenhuizen wrote:
> I am mainly a Centos user and am quite a novice when it comes to Debian and
> I have a computer which is currently running Stretch 9.6 and I recently
> install apt 1.4.9.
> 
> With the release of Stretch 9.7 and because of the recent vulnerability
> discovered in apt I'm not sure how to proceed.
> 

In your case there is actually nothing to be done.

This is just a point release and is only interesting for installs.
You are running Stretch already and any update automatically pulls in new
updates (as you have already done with apt).


> According to the instructions in the Debian Security Advisory they advise
> disabling redirects which might
> "break some proxies when used against security.debian.org", not sure exactly
> what this means to me,

You could update, couldn't you? So you are fine.

> 
> and further on it says "For the stable distribution (stretch), this problem
> has been fixed in version 1.4.9"
> 
> I just don't know what direction I should take, so I'd appreciate some
> insight and pointers on how I should proceed.
> 

Stay put :)


-H

-- 
Henning Follmann           | hfollmann@itcfollmann.com

[toc] | [prev] | [next] | [standalone]

#204626

Pete Geenhuizen wrote:

> I am mainly a Centos user and am quite a novice when it comes to Debian
> and I have a computer which is currently running Stretch 9.6 and I
> recently install apt 1.4.9.
> 
> With the release of Stretch 9.7 and because of the recent vulnerability
> discovered in apt I'm not sure how to proceed.

apt-get update
apt-get upgrade

as root

[toc] | [prev] | [next] | [standalone]

#204628

Hi Pete,

On Fri, Jan 25, 2019 at 12:23:27PM -0500, Pete Geenhuizen wrote:
> I am mainly a Centos user and am quite a novice when it comes to Debian and
> I have a computer which is currently running Stretch 9.6 and I recently
> install apt 1.4.9.

So you already have version 1.4.9? What does:

dpkg -l apt

say?

> With the release of Stretch 9.7 and because of the recent vulnerability
> discovered in apt I'm not sure how to proceed.

Normally as long as you have the stretch/updates line in your
/etc/apt/sources.list then you will upgrade through the point
releases just by doing normal package updates.

> According to the instructions in the Debian Security Advisory they advise
> disabling redirects which might
> "break some proxies when used against security.debian.org", not sure exactly
> what this means to me,

Well you said above that you already have upgraded to it, so there
is no upgrade left to do. But all this is saying is that, since it
is possible for the buggy version of apt to do bad things when
presented with a redirect, you may wish to disable redirects when
upgrading to the fixed version.

However, security.debian.org does have a redirect to
security-cdn.debian.org so by disabling redirects it will not allow
that upgrade to happen. You would need to either pick a mirror that
doesn't do a redirect (e.g. by using security-cdn.debian.org
directly), or else download the .deb file manually, verify its hash
and then install it with dpkg.

All of this is mentioned in the advisory.

Cheers,
Andy

-- 
https://bitfolk.com/ -- No-nonsense VPS hosting

[toc] | [prev] | [next] | [standalone]

#204632

[Multipart message — attachments visible in raw view] — view raw

On Fri, Jan 25, 2019 at 11:35 AM Pete Geenhuizen <pete@geenhuizen.net>
wrote:

> I am mainly a Centos user and am quite a novice when it comes to Debian
> and I have a computer which is currently running Stretch 9.6 and I recently
> install apt 1.4.9.
>
> With the release of Stretch 9.7 and because of the recent vulnerability
> discovered in apt I'm not sure how to proceed.
>

I suspect that if you do a

$ cat /etc/debian_version

you'll discover you're already at 9.7. If not, a

$ apt update
$ apt dist-upgrade

should do the job.


-- 
Kent West                    <")))><
Westing Peacefully - http://kentwest.blogspot.com

[toc] | [prev] | [next] | [standalone]

#204633

[Multipart message — attachments visible in raw view] — view raw

On Fri, Jan 25, 2019 at 1:10 PM Kent West <westk@acu.edu> wrote:

>
> $ apt update
> $ apt dist-upgrade
>
>
Sorry, that should have been

# sudo apt update
# sudo apt dist-upgrade

or, as root,

# apt update
# apt dist-upgrade

-- 
Kent West                    <")))><
Westing Peacefully - http://kentwest.blogspot.com

[toc] | [prev] | [next] | [standalone]

#204635

[Multipart message — attachments visible in raw view] — view raw

On 25/01/2019 19:11, Kent West wrote:
>
>
> On Fri, Jan 25, 2019 at 1:10 PM Kent West <westk@acu.edu
> <mailto:westk@acu.edu>> wrote:
>
>
>     $ apt update
>     $ apt dist-upgrade
>
>
> Sorry, that should have been
>
> # sudo apt update
> # sudo apt dist-upgrade
>
> or, as root,
>
> # apt update
> # apt dist-upgrade
>
> -- 
> Kent West                    <")))><
> Westing Peacefully - http://kentwest.blogspot.com


So in this context what is the differences between upgrade and
dist-upgrade ? I just used apt upgrade and generally use apt
dist-upgrade to go between the main Debian releases,  as in 8 -> 9. 

Given the apt bug does dist-upgrade do something else.?


Paul


-- 
Paul Sutton
http://www.zleap.net
https://www.linkedin.com/in/zleap/
Twitter : @zleap2018

[toc] | [prev] | [next] | [standalone]

#204637

[Multipart message — attachments visible in raw view] — view raw

On Fri, Jan 25, 2019 at 1:24 PM Paul Sutton <zleap@disroot.org> wrote:

>
> On 25/01/2019 19:11, Kent West wrote:
> >
> >
> > On Fri, Jan 25, 2019 at 1:10 PM Kent West <westk@acu.edu
> > <mailto:westk@acu.edu>> wrote:
> >
> >
> >     $ apt update
> >     $ apt dist-upgrade
> >
> >
> > Sorry, that should have been
> >
> > # sudo apt update
> > # sudo apt dist-upgrade
> >
> > or, as root,
> >
> > # apt update
> > # apt dist-upgrade
> >
> > --
> > Kent West                    <")))><
> > Westing Peacefully - http://kentwest.blogspot.com
>
>
> So in this context what is the differences between upgrade and
> dist-upgrade ? I just used apt upgrade and generally use apt
> dist-upgrade to go between the main Debian releases,  as in 8 -> 9.
>
> Given the apt bug does dist-upgrade do something else.?
>
>
If the vulnerability to which you refer is the "lateral movement" bug, it's
been around quite a while (2009?), but only recently discovered. It's also
been fixed (to my understanding) as of apt 1.4.9, which you say you have.

So the dist-upgrade does not do anything else "given the apt bug".

The basic difference between upgrade and dist-upgrade is that upgrade
doesn't remove existing or pull in not-installed stuff, whereas
dist-upgrade might. The former is good when you need a box to undergo
minimal change; the latter is good when you just want things to "work". The
former is probably more suitable for servers, the latter for end-user
computers.

I usually do "dist-upgrade" out of habit (as I spend most of my time on
end-user computers); but "upgrade" might be, at least theoretically, safer.


-- 
Kent West                    <")))><
Westing Peacefully - http://kentwest.blogspot.com

[toc] | [prev] | [next] | [standalone]

#209112

[Multipart message — attachments visible in raw view] — view raw

On Vi, 25 ian 19, 13:36:37, Kent West wrote:
> 
> The basic difference between upgrade and dist-upgrade is that upgrade
> doesn't remove existing or pull in not-installed stuff, whereas
> dist-upgrade might.

That is true for 'apt-get upgrade/dist-upgrade'. 'apt upgrade' will 
install packages.

> The former is good when you need a box to undergo
> minimal change; the latter is good when you just want things to "work". The
> former is probably more suitable for servers, the latter for end-user
> computers.
> 
> I usually do "dist-upgrade" out of habit (as I spend most of my time on
> end-user computers); but "upgrade" might be, at least theoretically, safer.

On Debian stable 'apt full-upgrade' is almost never necessary[1] if you 
use 'apt upgrade' regularly, the major exception being upgrading to the 
next stable release (of course).

Even on testing or unstable one could use 'apt upgrade' regularly and 
'apt full-upgrade' only when necessary.

[1] I seem to recall that in the cases where it is necessary 'apt' will 
mention "held back packages" and will even suggest to use 
'full-upgrade'.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser

[toc] | [prev] | [next] | [standalone]

#204636

On Fri 25 Jan 2019 at 13:11:46 -0600, Kent West wrote:

> # apt dist-upgrade

apt full-upgrade

Fortunately, dist-upgrade also works in the same way even though it is
not documented in the stretch manual

[toc] | [prev] | [next] | [standalone]

#204638

[Multipart message — attachments visible in raw view] — view raw

On Fri, Jan 25, 2019 at 1:36 PM Brian <ad44@cityscape.co.uk> wrote:

> On Fri 25 Jan 2019 at 13:11:46 -0600, Kent West wrote:
>
> > # apt dist-upgrade
>
> apt full-upgrade
>
> Fortunately, dist-upgrade also works in the same way even though it is
> not documented in the stretch manual
>
>
Oh yeah; I forget. I think I remember understanding at one time that
"full-upgrade" is the "newer" name for "dist-upgrade", since it's not just
used during an upgrade to a new distribution, but "dist-upgrade" is the
command my fingers remember.

-- 
Kent West                    <")))><
Westing Peacefully - http://kentwest.blogspot.com

[toc] | [prev] | [next] | [standalone]

#204651

[Multipart message — attachments visible in raw view] — view raw

or sudo apt update && sudo apt dist-update


‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
On Friday, January 25, 2019 7:11 PM, Kent West <westk@acu.edu> wrote:

> On Fri, Jan 25, 2019 at 1:10 PM Kent West <westk@acu.edu> wrote:
> 

> > $ apt update
> > $ apt dist-upgrade
> 

> Sorry, that should have been
> 

> # sudo apt update
> # sudo apt dist-upgrade
> 

> or, as root,
> 

> # apt update
> # apt dist-upgrade
> 

> --
> Kent West                    <")))><
> Westing Peacefully - http://kentwest.blogspot.com

[toc] | [prev] | [next] | [standalone]

#204653

On Fri 25 Jan 2019 at 23:46:22 (+0000), Katnip wrote:
> or sudo apt update && sudo apt dist-update
                                 ↑↑↑↑↑↑↑↑↑↑↑

I've never seen this one. What does it do?
Some sort of automatic editing of sources.list?

Cheers,
David.

[toc] | [prev] | [next] | [standalone]

#204654

9.7 is not a new version. It is a new ISO to install Debian 9 with the 
latest updates.
Just update and your "old version" becomes the New

On January 25, 2019 4:38:42 PM David Wright <deblis@lionunicorn.co.uk> wrote:

> On Fri 25 Jan 2019 at 23:46:22 (+0000), Katnip wrote:
>> or sudo apt update && sudo apt dist-update
>                                 ↑↑↑↑↑↑↑↑↑↑↑
>
> I've never seen this one. What does it do?
> Some sort of automatic editing of sources.list?
>
> Cheers,
> David.

[toc] | [prev] | [next] | [standalone]

#204656

[Multipart message — attachments visible in raw view] — view raw

On Fri, Jan 25, 2019 at 6:39 PM David Wright <deblis@lionunicorn.co.uk>
wrote:

> On Fri 25 Jan 2019 at 23:46:22 (+0000), Katnip wrote:
> > or sudo apt update && sudo apt dist-update
>                                  ↑↑↑↑↑↑↑↑↑↑↑
>
> I've never seen this one. What does it do?
> Some sort of automatic editing of sources.list?


It's a shorthand way of executing two commands from one command line. The
second command will only execute if the first command is successful
(returns an exit status of zero). Here's a short test you can try:

$ false && echo First command was successful
$ true && echo First command was successful
First command was successful

[toc] | [prev] | [next] | [standalone]

#204657

[Multipart message — attachments visible in raw view] — view raw

Hi, that is my bad. typos.it should read sudo apt update && sudo apt full-upgrade




‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
On Saturday, January 26, 2019 12:38 AM, David Wright <deblis@lionunicorn.co.uk> wrote:

> On Fri 25 Jan 2019 at 23:46:22 (+0000), Katnip wrote:
> 

> > or sudo apt update && sudo apt dist-update
> 

>                                  ↑↑↑↑↑↑↑↑↑↑↑
>     

> 

> I've never seen this one. What does it do?
> Some sort of automatic editing of sources.list?
> 

> Cheers,
> David.

[toc] | [prev] | [next] | [standalone]

#204658

[Multipart message — attachments visible in raw view] — view raw

On Fri, Jan 25, 2019 at 8:25 PM Katnip <katnip62@pm.me> wrote:

> Hi, that is my bad. typos.it should read sudo apt update && sudo apt
> full-upgrade
>
>
>
>
> ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
> On Saturday, January 26, 2019 12:38 AM, David Wright <
> deblis@lionunicorn.co.uk> wrote:
>
> > On Fri 25 Jan 2019 at 23:46:22 (+0000), Katnip wrote:
> >
>
> > > or sudo apt update && sudo apt dist-update
> >
>
> >                                  ↑↑↑↑↑↑↑↑↑↑↑
> >
>
> >
>
> > I've never seen this one. What does it do?
> > Some sort of automatic editing of sources.list?
> >
>
> > Cheers,
> > David.
>
>
Ah, I didn't catch the typo, and answered the wrong question in my previous
response. D'oh! My bad.

-- 
Kent West                    <")))><
Westing Peacefully - http://kentwest.blogspot.com

[toc] | [prev] | [next] | [standalone]

#204642

[Multipart message — attachments visible in raw view] — view raw

Well now I certainly a few things to mull over.

Thanks for the responses and suggestions.

Pete



On 01/25/2019 12:23 PM, Pete Geenhuizen wrote:
>
> I am mainly a Centos user and am quite a novice when it comes to 
> Debian and I have a computer which is currently running Stretch 9.6 
> and I recently install apt 1.4.9.
>
> With the release of Stretch 9.7 and because of the recent 
> vulnerability discovered in apt I'm not sure how to proceed.
>
> According to the instructions in the Debian Security Advisory they 
> advise disabling redirects which might
> "break some proxies when used against security.debian.org", not sure 
> exactly what this means to me,
>
> and further on it says "For the stable distribution (stretch), this 
> problem has been fixed in version 1.4.9"
>
> I just don't know what direction I should take, so I'd appreciate some 
> insight and pointers on how I should proceed.
>
> Thanks
>
> Pete
>
>
> -- 
> Unencumbered by the thought process.
>   -- Click and Clack the Tappet brothers
>
> -- 
> This message has been scanned for viruses and
> dangerous content by *MailScanner* <http://www.mailscanner.info/>, and is
> believed to be clean. 

-- 
Unencumbered by the thought process.
  -- Click and Clack the Tappet brothers


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

[toc] | [prev] | [next] | [standalone]

#204643

[Multipart message — attachments visible in raw view] — view raw

On Fri, Jan 25, 2019, 15:35 Pete Geenhuizen <pete@geenhuizen.net wrote:

> Well now I certainly a few things to mull over.
>
> Thanks for the responses and suggestions.
>
> Pete
>
>
>
> On 01/25/2019 12:23 PM, Pete Geenhuizen wrote:
>
> I am mainly a Centos user and am quite a novice when it comes to Debian
> and I have a computer which is currently running Stretch 9.6 and I recently
> install apt 1.4.9.
>
> With the release of Stretch 9.7 and because of the recent vulnerability
> discovered in apt I'm not sure how to proceed.
>
> According to the instructions in the Debian Security Advisory they advise
> disabling redirects which might
> "break some proxies when used against security.debian.org", not sure
> exactly what this means to me,
>
> and further on it says "For the stable distribution (stretch), this
> problem has been fixed in version 1.4.9"
>
> I just don't know what direction I should take, so I'd appreciate some
> insight and pointers on how I should proceed.
>
> Thanks
>
> Pete
>
>
> --
> Unencumbered by the thought process.
>  -- Click and Clack the Tappet brothers
>
>
> --
> This message has been scanned for viruses and
> dangerous content by *MailScanner* <http://www.mailscanner.info/>, and is
> believed to be clean.
>
>
> --
> Unencumbered by the thought process.
>  -- Click and Clack the Tappet brothers
>
>
> --
> This message has been scanned for viruses and
> dangerous content by *MailScanner* <http://www.mailscanner.info/>, and is
> believed to be clean.
>



Pete, don't mull.

Ask.

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.user

csiph-web