you are viewing a single comment's thread
view the rest of the comments
[–] 6 points 7 months ago (3 children)

It's difficult to do security-only updates when the fix is contained within a package update.

Even Microsoft's security updates are a mix with secuirity updates containing feature changes and vice versa.

I usually do an update on 1 random device / VM and if that was ok (inc. watching for any .pacnew files) and then kick Ansible into action for the rest.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 7 months ago (2 children)

    Why does unattended upgrades with security only setting not fix this?

    This is literally why Debian has distinct repos for security updates.

  • source
  • parent
  • hideshow 2 child comments