On 10th of September Debian published the following three security issues and published updated packages:
DSA-4973 thunderbird
DSA-4972 ghostscript
DSA-4969 firefox-esr
I have got the debian repositories installed with pinning to PureOS, so I can ask for the installation candidates using apt policy
:
root@pureOS1:/etc/apt$ apt policy thunderbird ghostscript firefox-esr
thunderbird:
Installed: 1:78.12.0-1
Candidate: 1:78.12.0-1
Version table:
1:78.14.0-1~deb11u1 -10
-10 http://deb.debian.org/debian-security bullseye-security/main amd64 Packages
*** 1:78.12.0-1 1001
1001 https://repo.puri.sm/pureos byzantium/main amd64 Packages
1001 https://repo.pureos.net/pureos byzantium/main amd64 Packages
-10 http://ftp.gwdg.de/debian bullseye/main amd64 Packages
100 /var/lib/dpkg/status
ghostscript:
Installed: 9.53.3~dfsg-7
Candidate: 9.53.3~dfsg-7
Version table:
9.53.3~dfsg-7+deb11u1 -10
-10 http://deb.debian.org/debian-security bullseye-security/main amd64 Packages
*** 9.53.3~dfsg-7 1001
1001 https://repo.puri.sm/pureos byzantium/main amd64 Packages
1001 https://repo.pureos.net/pureos byzantium/main amd64 Packages
-10 http://ftp.gwdg.de/debian bullseye/main amd64 Packages
100 /var/lib/dpkg/status
firefox-esr:
Installed: 78.12.0esr-1
Candidate: 78.12.0esr-1
Version table:
78.14.0esr-1~deb11u1 -10
-10 http://deb.debian.org/debian-security bullseye-security/main amd64 Packages
*** 78.12.0esr-1 1001
1001 https://repo.puri.sm/pureos byzantium/main amd64 Packages
1001 https://repo.pureos.net/pureos byzantium/main amd64 Packages
-10 http://ftp.gwdg.de/debian bullseye/main amd64 Packages
100 /var/lib/dpkg/status
root@pureOS1:/etc/apt$
My sources.list looks like this for PureOS:
root@pureOS1:/etc/apt$ grep -v '^#' /etc/apt/sources.list
deb [arch=amd64] https://repo.puri.sm/pureos byzantium main
deb [arch=amd64] https://repo.pureos.net/pureos/ byzantium-security main
deb [arch=amd64] https://repo.pureos.net/pureos/ byzantium-updates main
deb [arch=amd64] https://repo.pureos.net/pureos/ byzantium main
deb-src https://repo.pureos.net/pureos/ byzantium main
Is my sources.list wrong or are there simply no updates?