Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

No Release file for Security Update

63 views
Skip to first unread message

Thomas George

unread,
Jan 16, 2024, 11:40:07 AM1/16/24
to
My system is Bookworm installed from the first DVD which was downloaded
with the checksums and successfully checked.

I commented out the dvd and added to sources.list lines for bookworm,
bookworm-updates and bookworm-security.

Ran apt-get update

The result was  bookworm InRelease, bookworm-updates InRelease,
bookworm-secutity Relesse 404 Not Found [IP: 146.75.30.132 80]

Reading package lists     Done

bookwoom-security Release does not have a Release file.

How do I fix this?

Greg Wooledge

unread,
Jan 16, 2024, 11:50:05 AM1/16/24
to
On Tue, Jan 16, 2024 at 11:30:09AM -0500, Thomas George wrote:
> I commented out the dvd and added to sources.list lines for bookworm,
> bookworm-updates and bookworm-security.

What lines did you add?

> Ran apt-get update
>
> The result was  bookworm InRelease, bookworm-updates InRelease,
> bookworm-secutity Relesse 404 Not Found [IP: 146.75.30.132 80]
>
> Reading package lists     Done
>
> bookwoom-security Release does not have a Release file.
>
> How do I fix this?

Either you added something incorrect, or your local mirror was in a
transitional state. Wait a few minutes and try again. If it still
doesn't work, show us what you have in your sources.list.

Marco Moock

unread,
Jan 16, 2024, 11:50:05 AM1/16/24
to
Am 16.01.2024 um 11:30:09 Uhr schrieb Thomas George:

> The result was  bookworm InRelease, bookworm-updates InRelease,
> bookworm-secutity Relesse 404 Not Found [IP: 146.75.30.132 80]
^

There seems to be a typo!

Greg Wooledge

unread,
Jan 16, 2024, 12:50:05 PM1/16/24
to
Two of them, including "Relesse". This makes it impossible to tell
whether the typos are in the sources.list file, or in the email, or
both.

This is why we ask that people *paste* information directly from their
terminal windows into the email they're writing. It prevents errors
being added during transcription.

Thomas George

unread,
Jan 17, 2024, 11:40:09 AM1/17/24
to
# deb cdrom:[Debian GNU/Linux 12.2.0 _Bookworm_ - Official amd64 DVD
Binary-1 with firmware 20231007-10:29]/ bookworm main non-free-firmware

deb http://ftp.debian.org/debian/ bookworm main non-free non-free-firmware

deb http://ftp.debian.org/debian/ bookworm-updates main non-free
non-free-firmware

# deb http://ftp.debian.org/debian/ bookworm-backports main non-free
non-free-firmware

deb http://ftp.debian.org/debian/ bookworm-security  main non-free
non-free-firmware
sources.list (END)


root@Phoenix:/etc/apt# apt-get update
Hit:1 http://ftp.debian.org/debian bookworm InRelease
Hit:2 http://ftp.debian.org/debian bookworm-updates InRelease
Ign:3 http://ftp.debian.org/debian bookworm-security InRelease
Hit:4 https://linux.brostrend.com stable InRelease
Err:5 http://ftp.debian.org/debian bookworm-security Release
  404  Not Found [IP: 151.101.

Tom Furie

unread,
Jan 17, 2024, 1:20:07 PM1/17/24
to
Thomas George <debia...@mailfence.com> writes:

> deb http://ftp.debian.org/debian/ bookworm-security  main non-free
> non-free-firmware
> Err:5 http://ftp.debian.org/debian bookworm-security Release
>   404  Not Found [IP: 151.101.

Your source is incorrect. The security repo is at
"http://security.debian.org/debian-security".

Thomas George

unread,
Jan 17, 2024, 6:40:05 PM1/17/24
to

On 1/17/24 16:13, Tom Furie wrote:
> Thomas George <debia...@mailfence.com> writes:
>
>>>> deb http://ftp.debian.org/debian/ bookworm-security  main non-free
>>>> non-free-firmware
>>>> Err:5 http://ftp.debian.org/debian bookworm-security Release
>>>>   404  Not Found [IP: 151.101.
>> I entered you suggested line as
>>
>> http://security.debian.org/debian-security
>>
>> and apt-get update responded:
>>
>> E: Malformed line 9 in source list /etc/apt/sources.list (type)
>> E: The list of sources could not be read.
> Please keep replies on-list in future, for the benefit of anyone else
> who might encounter a similar problem.
>
> You still need the rest of the line, I only indicated the correct
> URL. The full line should look like: (it might get wrapped but should
> all be a single line)
>
> http://security.debian.org/debian-security bookworm-security main non-free non-free-firmware
>
> Cheers,
> Tom

Still not right bur InRelease:

root@Phoenix:/etc/apt# apt-get update
Ign:1 http://ftp.security.debian.org/debian-security bookworm-secutity
InRelease
Hit:2 http://ftp.debian.org/debian bookworm InRelease
Hit:3 http://ftp.debian.org/debian bookworm-updates InRelease
Hit:4 https://linux.brostrend.com stable InRelease
Ign:1 http://ftp.security.debian.org/debian-security bookworm-secutity
InRelease
Ign:1 http://ftp.security.debian.org/debian-security bookworm-secutity
InRelease
Err:1 http://ftp.security.debian.org/debian-security bookworm-secutity
InRelease
  Could not resolve 'ftp.security.debian.org'
Reading package lists... Done
W: Failed to fetch
http://ftp.security.debian.org/debian-security/dists/bookworm-secutity/InRelease
Could not resolve 'ftp.security.debian.org'
W: Some index files failed to download. They have been ignored, or old
ones used instead.

I tried leavin security.debian.org out of the line but that didn't work
either

Greg Wooledge

unread,
Jan 17, 2024, 7:10:06 PM1/17/24
to
On Wed, Jan 17, 2024 at 11:31:52AM -0500, Thomas George wrote:
> # deb cdrom:[Debian GNU/Linux 12.2.0 _Bookworm_ - Official amd64 DVD
> Binary-1 with firmware 20231007-10:29]/ bookworm main non-free-firmware

This one, before you commented it out, only contained non-free-firmware
and *not* non-free. They are two different sections.

> deb http://ftp.debian.org/debian/ bookworm main non-free non-free-firmware

Here, someone has added non-free. If that's not what you want, you
can remove that. You should *keep* non-free-firmware, though.

Also, if you don't want to use plain http, you can change this to https.

> deb http://ftp.debian.org/debian/ bookworm-security  main non-free
> non-free-firmware

This one is incorrect, but someone else already addressed that one.
Be sure you actually follow their instructions correctly. The
hostnames security.debian.org and ftp.security.debian.org are not
the same.

Thomas George

unread,
Jan 17, 2024, 8:50:05 PM1/17/24
to
I have tried many permutations of the last line in this sources.list

# deb cdrom:[Debian GNU/Linux 12.2.0 _Bookworm_ - Official amd64 DVD
Binary-1 with firmware 20231007-10:29]/ bookworm main non-free-firmware

deb http://ftp.debian.org/debian/ bookworm main non-free non-free-firmware

deb http://ftp.debian.org/debian/ bookworm-updates main non-free
non-free-firmware

# deb http://ftp.debian.org/debian/ bookworm-backports main non-free
non-free-firmware

deb http://ftp.security-debian.org/debian-security/ bookworm-security
main non-free non-free-firmware

None have worked perfectly, apt-get update gives this

root@Phoenix:/etc/apt# apt-get update
Hit:1 http://ftp.debian.org/debian bookworm InRelease
Hit:2 http://ftp.debian.org/debian bookworm-updates InRelease
Hit:3 https://linux.brostrend.com stable InRelease
Ign:4 http://ftp.security-debian.org/debian-security bookworm-security
InRelease
Ign:4 http://ftp.security-debian.org/debian-security bookworm-security
InRelease
Ign:4 http://ftp.security-debian.org/debian-security bookworm-security
InRelease
Err:4 http://ftp.security-debian.org/debian-security bookworm-security
InRelease
  Could not connect to ftp.security-debian.org:80 (57.128.81.193),
connection timed out
Reading package lists... Done
W: Failed to fetch
http://ftp.security-debian.org/debian-security/dists/bookworm-security/InRelease
Could not connect to ftp.security-debian.org:80 (57.128.81.193),
connection timed out
W: Some index files failed to download. They have been ignored, or old
ones used instead.
root@Phoenix:/etc/apt# vi sources.list

Greg Wooledge

unread,
Jan 17, 2024, 9:00:07 PM1/17/24
to
On Wed, Jan 17, 2024 at 08:40:58PM -0500, Thomas George wrote:
> deb http://ftp.security-debian.org/debian-security/ bookworm-security main
> non-free non-free-firmware

Stop guessing, and *read* what you were told to use.

https://lists.debian.org/debian-user/2024/01/msg00778.html

Your source is incorrect. The security repo is at
"http://security.debian.org/debian-security";.

There are other lines that also work, but you can't just guess randomly
until you stumble across one. Read a trusted source, and copy what
they tell you to use. Don't put "ftp." in front of things that don't
need it.

Todd Zullinger

unread,
Jan 17, 2024, 11:10:06 PM1/17/24
to
https://wiki.debian.org/SourcesList is also a good resource
with numerous examples.

--
Todd

Charles Curley

unread,
Jan 18, 2024, 1:50:07 AM1/18/24
to
On Wed, 17 Jan 2024 11:31:52 -0500
Thomas George <debia...@mailfence.com> wrote:

> # deb cdrom:[Debian GNU/Linux 12.2.0 _Bookworm_ - Official amd64 DVD
> Binary-1 with firmware 20231007-10:29]/ bookworm main
> non-free-firmware
>
> deb http://ftp.debian.org/debian/ bookworm main non-free
> non-free-firmware
>
> deb http://ftp.debian.org/debian/ bookworm-updates main non-free
> non-free-firmware
>
> # deb http://ftp.debian.org/debian/ bookworm-backports main non-free
> non-free-firmware
>
> deb http://ftp.debian.org/debian/ bookworm-security  main non-free
> non-free-firmware
> sources.list (END)

The first thing I'll suggest is that you replace
http://ftp.debian.org/debian/ with http://deb.debian.org/debian

More to the point, the security URL I have is
http://security.debian.org/debian-security

>
>
> root@Phoenix:/etc/apt# apt-get update
> Hit:1 http://ftp.debian.org/debian bookworm InRelease
> Hit:2 http://ftp.debian.org/debian bookworm-updates InRelease
> Ign:3 http://ftp.debian.org/debian bookworm-security InRelease
> Hit:4 https://linux.brostrend.com stable InRelease
> Err:5 http://ftp.debian.org/debian bookworm-security Release
>   404  Not Found [IP: 151.101.

I'm guessing that that brostrend line came from something in
/etc/apt/sources.d. Sometimes renaming those is a useful debugging
trick.

For more information, see man 5 sources.list.

--
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

Thomas George

unread,
Jan 18, 2024, 10:30:06 AM1/18/24
to

Thomas George

unread,
Jan 18, 2024, 10:50:06 AM1/18/24
to
I typed the above line exactly. apt-get update searches for
security.debian.org:80 [57.128.81.193] and times out, no connection

gene heskett

unread,
Jan 18, 2024, 11:00:05 AM1/18/24
to
But, but it Just Works here.
> .

Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
- Louis D. Brandeis

Greg Wooledge

unread,
Jan 18, 2024, 11:10:06 AM1/18/24
to
On Thu, Jan 18, 2024 at 10:59:34AM -0500, gene heskett wrote:
> And that is not the address I get from here
> ping -c1 security.debian.org
> PING security.debian.org (151.101.2.132) 56(84) bytes of data.
> 64 bytes from 151.101.2.132 (151.101.2.132): icmp_seq=1 ttl=59 time=15.8 ms
>
> Your dns isn't working?

It's more complicated than that.

unicorn:~$ host security.debian.org
security.debian.org has address 151.101.2.132
security.debian.org has address 151.101.130.132
security.debian.org has address 151.101.194.132
security.debian.org has address 151.101.66.132
security.debian.org has IPv6 address 2a04:4e42:400::644
security.debian.org has IPv6 address 2a04:4e42:600::644
security.debian.org has IPv6 address 2a04:4e42:200::644
security.debian.org has IPv6 address 2a04:4e42::644
security.debian.org mail is handled by 10 mitropoulos.debian.org.
security.debian.org mail is handled by 10 mailly.debian.org.
security.debian.org mail is handled by 10 muffat.debian.org.

It's a round robin with 4 IPv4 and 4 IPv6 addresses. (You can ignore
the mail server lines.)

gene heskett

unread,
Jan 18, 2024, 11:10:07 AM1/18/24
to
On 1/18/24 10:49, Thomas George wrote:
>
> .
And that is not the address I get from here
ping -c1 security.debian.org
PING security.debian.org (151.101.2.132) 56(84) bytes of data.
64 bytes from 151.101.2.132 (151.101.2.132): icmp_seq=1 ttl=59 time=15.8 ms

Your dns isn't working?

Thomas George

unread,
Jan 18, 2024, 11:50:06 AM1/18/24
to
Yes thank you. I have copied all the lines from the wiki example and
they all work perfectly.  This is my new sources.list file

deb http://deb.debian.org/debian/ bookworm main non-free-firmware
contrib non-free
deb-src http://deb.debian.org/debian/ bookworm main non-free-firmware
contrib non-free

deb http://deb.debian.org/debian/ bookworm-updates main
non-free-firmware contrib non-free
deb-src http://deb.debian.org/debian/ bookworm-updates main
non-free-firmware contrib non-free

deb http://security.debian.org/debian-security bookworm-security main
non-free-firmware contrib non-free
deb-src http://security.debian.org/debian-security bookworm-security
main non-free-firmware contrib non-free

Thomas George

unread,
Jan 18, 2024, 11:50:06 AM1/18/24
to
  New sources.list file works perfectly

deb http://deb.debian.org/debian/ bookworm main non-free-firmware
contrib non-free
deb-src http://deb.debian.org/debian/ bookworm main non-free-firmware
contrib non-free

deb http://deb.debian.org/debian/ bookworm-updates main
non-free-firmware contrib non-free
deb-src http://deb.debian.org/debian/ bookworm-updates main
non-free-firmware contrib non-free

deb http://security.debian.org/debian-security bookworm-security main
non-free-firmware contrib non-free
deb-src http://security.debian.org/debian-security bookworm-security
main non-free-firmware contrib non-free

Tom George

John Hasler

unread,
Jan 18, 2024, 12:00:06 PM1/18/24
to
Thomas George wrote:
> I typed the above line exactly. apt-get update searches for
> security.debian.org:80 [57.128.81.193] and times out, no connection

Gene writes:
> And that is not the address I get from here

It's the one I get from here, and it times out. My DNS is working.

--
John Hasler
jo...@sugarbit.com
Elmwood, WI USA

John Hasler

unread,
Jan 18, 2024, 12:10:06 PM1/18/24
to
Host gives me the same result. However, apt says:

0% [Connecting to security-debian.org (57.128.81.193)]

and times out.

Using "nameserver 8.8.8.8" changes nothing.

Tixy

unread,
Jan 18, 2024, 12:20:07 PM1/18/24
to
Where could your machine be getting this IP address from?
It's the same IP address shown in your output when you used the
incorrect address 'ftp.security.debian.org' and for me that doesn't
resolve to any IP address.

--
Tixy

John Hasler

unread,
Jan 18, 2024, 1:10:06 PM1/18/24
to
Tixy writes:
> Where could your machine be getting this IP address from? It's the
> same IP address shown in your output when you used the incorrect
> address 'ftp.security.debian.org' and for me that doesn't resolve to
> any IP address.

>From here both security.debian.org and ftp.security.debian.org resolve
to 57.128.81.193. Happens both with Unbound and with 8.8.8.8.

toncho/~ 22 dig ftp.security-debian.org

; <<>> DiG 9.19.19-1-Debian <<>> ftp.security-debian.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2686
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;ftp.security-debian.org. IN A

;; ANSWER SECTION:
ftp.security-debian.org. 3296 IN CNAME security-debian.org.
security-debian.org. 3089 IN A 57.128.81.193

;; Query time: 0 msec
;; SERVER: 192.168.1.2#53(192.168.1.2) (UDP)
;; WHEN: Thu Jan 18 12:03:08 CST 2024
;; MSG SIZE rcvd: 101

toncho/~ 22 dig @8.8.8.8 ftp.security-debian.org

; <<>> DiG 9.19.19-1-Debian <<>> @8.8.8.8 ftp.security-debian.org
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42376
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;ftp.security-debian.org. IN A

;; ANSWER SECTION:
ftp.security-debian.org. 3600 IN CNAME security-debian.org.
security-debian.org. 3600 IN A 57.128.81.193

;; Query time: 308 msec
;; SERVER: 8.8.8.8#53(8.8.8.8) (UDP)
;; WHEN: Thu Jan 18 12:03:42 CST 2024
;; MSG SIZE rcvd: 82

toncho/~ 22 dig @8.8.8.8 security-debian.org

; <<>> DiG 9.19.19-1-Debian <<>> @8.8.8.8 security-debian.org
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13855
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;security-debian.org. IN A

;; ANSWER SECTION:
security-debian.org. 3600 IN A 57.128.81.193

;; Query time: 284 msec
;; SERVER: 8.8.8.8#53(8.8.8.8) (UDP)
;; WHEN: Thu Jan 18 12:05:00 CST 2024
;; MSG SIZE rcvd: 64

Tixy

unread,
Jan 18, 2024, 1:20:07 PM1/18/24
to
On Thu, 2024-01-18 at 12:06 -0600, John Hasler wrote:
> Tixy writes:
> > Where could your machine be getting this IP address from?  It's the
> > same IP address shown in your output when you used the incorrect
> > address 'ftp.security.debian.org' and for me that doesn't resolve to
> > any IP address.
>
> > From here both security.debian.org and ftp.security.debian.org resolve
> to 57.128.81.193.  Happens both with Unbound and with 8.8.8.8.
>
> toncho/~ 22 dig  ftp.security-debian.org

That's a different address (you're using a '-') and works for me too.

I was using the address that George _said_ he used in his email,
obviously he was wrong and just mis-typing emails rather than copy and
pasting in what he was actually using :-(

--
Tixy

Tixy

unread,
Jan 18, 2024, 2:00:06 PM1/18/24
to
Of course you're also guilty John ;-) saying 'ftp.security.debian.org'
resolved, but at least you pasted a command showing what you really
used :-)

--
Tixy

Tixy

unread,
Jan 18, 2024, 2:10:07 PM1/18/24
to
And now you can all point out that it was me that was misquoting the
address and using a dot where in fact everyone else was using a hyphen
in 'debian-security'. I'll now slink away red faced and try and find a
hole big enough to crawl into...

--
Tixy

Greg Wooledge

unread,
Jan 18, 2024, 2:20:05 PM1/18/24
to
On Thu, Jan 18, 2024 at 10:59:48AM -0600, John Hasler wrote:
> Host gives me the same result. However, apt says:
>
> 0% [Connecting to security-debian.org (57.128.81.193)]

security-debian.org and security.debian.org are different names.

Thomas George

unread,
Jan 18, 2024, 5:40:05 PM1/18/24
to
  The following sources.list which I copied from
wiki.debian.org/SourcesList works perfectly for me

deb http://deb.debian.org/debian/ bookworm main non-free-firmware
contrib non-free
deb-src http://deb.debian.org/debian/ bookworm main non-free-firmware
contrib non-free

deb http://deb.debian.org/debian/ bookworm-updates main
non-free-firmware contrib non-free
deb-src http://deb.debian.org/debian/ bookworm-updates main
non-free-firmware contrib non-free

deb http://security.debian.org/debian-security bookworm-security main
non-free-firmware contrib non-free
deb-src http://security.debian.org/debian-security bookworm-security
main non-free-firmware contrib non-free

Thanks to the many responders who coached me through my rambling,
incoherent path to this solution.

My apologies to the many responders who I misled with dumb entries.

I hope this ends the search for all.

Tom George

debia...@howorth.org.uk

unread,
Jan 19, 2024, 4:40:05 AM1/19/24
to
Another example of why posting the prompt and command as well as the
output is useful :)
0 new messages