Re: Security Updates

From	Larry Dighera <LDighera@att.net>
Newsgroups	linux.debian.user
Subject	Re: Security Updates
Date	2016-08-31 17:40 +0200
Message-ID	<scfMl-4aI-15@gated-at.bofh.it> (permalink)
References	<sbXmq-Og-19@gated-at.bofh.it> <sca9Y-E9-23@gated-at.bofh.it> <scdAR-2Rr-9@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Wed, 31 Aug 2016 14:19:15 +0100, Lisi Reisz <lisi.reisz@gmail.com> wrote:

>On Wednesday 31 August 2016 10:39:53 Lisi Reisz wrote:
>> Since you are not replying to anyhting, you may not be subscribed,
>
>I had a reply off list that said that Larry is not replying to our questions 
>because he considers them irrelevant to his original question.
>
>Lisi


Of course, that is not what I said at all.  

Here is a copy of the message I sent to Lisi:

-------------------------------------------------------------------------
To: Lisi Reisz <lisi.reisz@gmail.com>
Subject: Re: Security Updates
From: Larry Dighera <LDighera@att.net>
Date: Wed, 31 Aug 2016 06:09:27 -0700

On Wed, 31 Aug 2016 10:39:53 +0100, Lisi Reisz <lisi.reisz@gmail.com> wrote:

>Since you are not replying to anyhting, you may not be subscribed, so here is 
>what I said again:
>
>On Tuesday 30 August 2016 20:58:47 Larry Dighera wrote:
>> This page <https://www.debian.org/releases/stable/errata> states:
>>
>>     "If you use APT, add the following line to /etc/apt/sources.list to be
>> able to access the latest security updates:
>>
>>     deb http://security.debian.org/ jessie/updates main contrib non-free
>>
>>     After that, run apt-get update followed by apt-get upgrade."
>>
>> Adding that entry to /etc/apt/sources.list on the Raspberry Pi3 running
>> Debian Jessie results in an error message indicating that the public key is
>> not found. It also finds two libraries that require updating that are not
>> found when the above mentioned /etc/apt/sources.list entry is removed.
>>
>>   1.  What do I need to do to prevent the error message?
>>
>>   2.  As there are other security related URLs (doubtless, as
>>   distributed/released) that are checked during apt-get update, is the
>>   recommended additional entry advisable/useful for this platform?
>
>What is the whole of your sources.list?
>
>Lisi
>
>Like other respondents I suspect that you are using Raspbian not Debian.  Your 
>sources list will tell me/us, or guide us ot teh problem if it is not that.


I'm sorry.  I didn't find your question relevant to my question about the
Debian.org web site providing instructions that produce error messages, and
politely ignored it.  
---------------------------------------------------------------------------


For those who may be following this message thread, here is the output from
'apt-get update' with the offending 'deb-src
http://archive.raspbian.org/raspbian/ jessie main contrib non-free rpi
' entry edited into the /etc/apt/sources.list as instructed on this page:
<https://www.debian.org/releases/stable/errata>:

-----------------------------------------------------------------------------
Get:1 http://security.debian.org jessie/updates InRelease [63.1 kB]
Hit http://mirrordirector.raspbian.org jessie InRelease
Hit http://archive.raspberrypi.org jessie InRelease
Ign http://security.debian.org jessie/updates InRelease
Hit http://mirrordirector.raspbian.org jessie/main armhf Packages
Ign http://linux.teamviewer.com stable InRelease
Get:2 http://security.debian.org jessie/updates/main armhf Packages [292 kB]
Hit http://archive.raspberrypi.org jessie/main armhf Packages
Ign http://linux.teamviewer.com preview InRelease
Hit http://mirrordirector.raspbian.org jessie/contrib armhf Packages
Hit http://archive.raspberrypi.org jessie/ui armhf Packages
Hit http://mirrordirector.raspbian.org jessie/non-free armhf Packages
Get:3 http://security.debian.org jessie/updates/contrib armhf Packages [1,138
B]
Hit http://linux.teamviewer.com stable Release.gpg
Hit http://mirrordirector.raspbian.org jessie/rpi armhf Packages
Get:4 http://security.debian.org jessie/updates/non-free armhf Packages [14 B]
Get:5 http://security.debian.org jessie/updates/contrib Translation-en [1,211
B]
Hit http://linux.teamviewer.com stable Release
Hit http://linux.teamviewer.com preview Release.gpg
Get:6 http://security.debian.org jessie/updates/main Translation-en [161 kB]
Hit http://linux.teamviewer.com stable/main armhf Packages
Get:7 http://security.debian.org jessie/updates/non-free Translation-en [14 B]
Hit http://linux.teamviewer.com preview Release
Hit http://linux.teamviewer.com preview/main armhf Packages
Ign http://security.debian.org jessie/updates/contrib Translation-en_GB
Ign http://security.debian.org jessie/updates/main Translation-en_GB
Ign http://security.debian.org jessie/updates/non-free Translation-en_GB
Ign http://archive.raspberrypi.org jessie/main Translation-en_GB
Ign http://archive.raspberrypi.org jessie/main Translation-en
Ign http://archive.raspberrypi.org jessie/ui Translation-en_GB
Ign http://archive.raspberrypi.org jessie/ui Translation-en
Ign http://linux.teamviewer.com stable/main Translation-en_GB
Ign http://linux.teamviewer.com stable/main Translation-en
Ign http://linux.teamviewer.com preview/main Translation-en_GB
Ign http://linux.teamviewer.com preview/main Translation-en
Ign http://mirrordirector.raspbian.org jessie/contrib Translation-en_GB
Ign http://mirrordirector.raspbian.org jessie/contrib Translation-en
Ign http://mirrordirector.raspbian.org jessie/main Translation-en_GB
Ign http://mirrordirector.raspbian.org jessie/main Translation-en
Ign http://mirrordirector.raspbian.org jessie/non-free Translation-en_GB
Ign http://mirrordirector.raspbian.org jessie/non-free Translation-en
Ign http://mirrordirector.raspbian.org jessie/rpi Translation-en_GB
Ign http://mirrordirector.raspbian.org jessie/rpi Translation-en
Fetched 518 kB in 8s (60.0 kB/s)
Reading package lists...
W: GPG error: http://security.debian.org jessie/updates InRelease: The ollowing
signatures couldn't be verified because the public key is not available:
NO_PUBKEY 9D6D8F6BC857C906 NO_PUBKEY 8B48AD6246925553
Reading package lists...
Building dependency tree...
Reading state information...
The following packages will be upgraded:
  libldap-2.4-2 linux-libc-dev
2 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 1,201 kB of archives.
After this operation, 50.2 kB disk space will be freed.
--------------------------------------------------------------------------

Thread

Security Updates Larry Dighera <LDighera@att.net> - 2016-08-30 22:00 +0200
  Re: Security Updates Tim McDonough <tmcdonough@gmail.com> - 2016-08-30 22:30 +0200
    Re: Security Updates Cindy-Sue Causey <butterflybytes@gmail.com> - 2016-08-30 23:00 +0200
  Re: Security Updates "Andrew M.A. Cater" <amacater@galactic.demon.co.uk> - 2016-08-30 22:50 +0200
    Re: Security Updates "Andrew M.A. Cater" <amacater@galactic.demon.co.uk> - 2016-08-31 15:30 +0200
      Re: Security Updates Larry Dighera <LDighera@att.net> - 2016-08-31 17:20 +0200
        Re: Security Updates Greg Wooledge <wooledg@eeg.ccf.org> - 2016-08-31 17:30 +0200
        Re: Security Updates Lisi Reisz <lisi.reisz@gmail.com> - 2016-08-31 17:40 +0200
        Re: Security Updates Charlie Kravetz <cjk@teamcharliesangels.com> - 2016-08-31 19:10 +0200
  Re: Security Updates Lisi Reisz <lisi.reisz@gmail.com> - 2016-08-30 23:20 +0200
  Re: Security Updates Lisi Reisz <lisi.reisz@gmail.com> - 2016-08-31 11:40 +0200
    Re: Security Updates Lisi Reisz <lisi.reisz@gmail.com> - 2016-08-31 15:20 +0200
      Re: Security Updates Mark Fletcher <mark27q1@gmail.com> - 2016-08-31 16:40 +0200
      Re: Security Updates Larry Dighera <LDighera@att.net> - 2016-08-31 17:40 +0200
  Re: Security Updates Darac Marjal <mailinglist@darac.org.uk> - 2016-08-31 15:50 +0200
    Re: Security Updates Larry Dighera <LDighera@att.net> - 2016-08-31 19:40 +0200

csiph-web