R SIG Debian - Aug 2023 - Is r2u at 3.4.1? [branch about handling package collisions under Ubuntu/Debian]

On Tue, 22 Aug 2023 19:38:57 +0200
Chris Evans <chrishold at psyctc.org> wrote:
>  ???? 8:6.9.11.60+dfsg-1.3build2 500
>  ??????? 500 http://mirror.infomaniak.ch/ubuntu jammy/universe amd64 
> Packages
Interesting. mirror.infomaniak.ch seems to be a full mirror of Ubuntu
repos, but https://packages.ubuntu.com/jammy/libmagick++-dev says that
the current version of the package is
8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3, not 8:6.9.11.60+dfsg-1.3build2. On
the other hand, I do see the 8:6.9.11.60+dfsg-1.3build2 version in the
changelog [*], it's just a bit older.

I think that your sources.list is missing the security updates repo,
which seems to be separate from the main repo:

deb http://security.ubuntu.com/ubuntu jammy-security main universe

-- 
Best regards,
Ivan

[*]
http://changelogs.ubuntu.com/changelogs/pool/universe/i/imagemagick/imagemagick_6.9.11.60+dfsg-1.3ubuntu0.22.04.3/changelog

On 24/08/2023 09:58, Ivan Krylov wrote:
> On Tue, 22 Aug 2023 19:38:57 +0200
> Chris Evans <chrishold at psyctc.org> wrote:
>
>>   ???? 8:6.9.11.60+dfsg-1.3build2 500
>>   ??????? 500 http://mirror.infomaniak.ch/ubuntu jammy/universe amd64
>> Packages
> Interesting. mirror.infomaniak.ch seems to be a full mirror of Ubuntu
> repos, but https://packages.ubuntu.com/jammy/libmagick++-dev says that
> the current version of the package is
> 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3, not 8:6.9.11.60+dfsg-1.3build2. On
> the other hand, I do see the 8:6.9.11.60+dfsg-1.3build2 version in the
> changelog [*], it's just a bit older.
Can you unpick that for me Ivan?? I see I now have:

libmagick++-dev is already the newest version 
(8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2)

That fits with what you are saying about the current version doesn't it?
> I think that your sources.list is missing the security updates repo,
> which seems to be separate from the main repo:
>
> deb http://security.ubuntu.com/ubuntu jammy-security main universe
That's worrying.? I would never knowingly have switched off security 
updates.? Updates in the Ubuntu
"Software & Updates" application has:

Where there are security updates: Download and install automatically

and I see this

root at Clevo2:/etc/apt# grep security sources.list
## review or updates from the Ubuntu security team.
## security team.
## or updates from the Ubuntu security team.
deb http://archive.ubuntu.com/ubuntu jammy-security main restricted
# deb-src http://security.ubuntu.com/ubuntu jammy-security main restricted
deb http://archive.ubuntu.com/ubuntu jammy-security universe
# deb-src http://security.ubuntu.com/ubuntu jammy-security universe
deb http://archive.ubuntu.com/ubuntu jammy-security multiverse
# deb-src http://security.ubuntu.com/ubuntu jammy-security multiverse

That's covering all of main, universe, multiverse and restricted for 
security updates isn't it?

TIA,

Chris


-- 
Chris Evans (he/him)
Visiting Professor, UDLA, Quito, Ecuador & Honorary Professor, 
University of Roehampton, London, UK.
Work web site: https://www.psyctc.org/psyctc/
CORE site: http://www.coresystemtrust.org.uk/
Personal site: https://www.psyctc.org/pelerinage2016/