committing changes in /etc after apt run

Package changes:
-console-setup 1.153 all
-console-setup-linux 1.153 all
+console-setup 1.154 all
+console-setup-linux 1.154 all
-keyboard-configuration 1.153 all
+keyboard-configuration 1.154 all
-krb5-locales 1.14.3+dfsg-2 all
+krb5-locales 1.15~beta1-1 all
-libevent-2.0-5 2.0.21-stable-2+b1 amd64
+libevent-2.0-5 2.0.21-stable-2.1 amd64
-libgssapi-krb5-2 1.14.3+dfsg-2 amd64
+libgssapi-krb5-2 1.15~beta1-1 amd64
-libk5crypto3 1.14.3+dfsg-2 amd64
+libk5crypto3 1.15~beta1-1 amd64
-libkrb5-3 1.14.3+dfsg-2 amd64
-libkrb5support0 1.14.3+dfsg-2 amd64
+libkrb5-3 1.15~beta1-1 amd64
+libkrb5support0 1.15~beta1-1 amd64
-libldap-2.4-2 2.4.42+dfsg-2+b3 amd64
+libldap-2.4-2 2.4.44+dfsg-1 amd64
+libldap-common 2.4.44+dfsg-1 all
-libprocps6 2:3.3.12-2 amd64
+libprocps6 2:3.3.12-3 amd64
-libpython2.7-minimal 2.7.12-3+b1 amd64
-libpython2.7-stdlib 2.7.12-3+b1 amd64
+libpython2.7-minimal 2.7.12-7 amd64
+libpython2.7-stdlib 2.7.12-7 amd64
-libpython3.5 3.5.2-6+b1 amd64
-libpython3.5-minimal 3.5.2-6+b1 amd64
-libpython3.5-stdlib 3.5.2-6+b1 amd64
+libpython3.5 3.5.2-8 amd64
+libpython3.5-minimal 3.5.2-8 amd64
+libpython3.5-stdlib 3.5.2-8 amd64
-libssl1.0.2 1.0.2j-1 amd64
+libssl1.0.2 1.0.2j-4 amd64
+libssl1.1 1.1.0c-2 amd64
-linux-image-4.8.0-1-amd64 4.8.5-1 amd64
+linux-image-4.8.0-1-amd64 4.8.7-1 amd64
-linux-libc-dev 4.8.5-1 amd64
+linux-libc-dev 4.8.7-1 amd64
-openssl 1.0.2j-1 amd64
+openssl 1.1.0c-2 amd64
-procps 2:3.3.12-2 amd64
+procps 2:3.3.12-3 amd64
-python-cryptography 1.5.2-1 amd64
+python-cryptography 1.5.3-1 amd64
-python2.7 2.7.12-3+b1 amd64
-python2.7-minimal 2.7.12-3+b1 amd64
+python2.7 2.7.12-7 amd64
+python2.7-minimal 2.7.12-7 amd64
-python3-cryptography 1.5.2-1 amd64
+python3-cryptography 1.5.3-1 amd64
-python3.5 3.5.2-6+b1 amd64
-python3.5-minimal 3.5.2-6+b1 amd64
+python3.5 3.5.2-8 amd64
+python3.5-minimal 3.5.2-8 amd64
-salt-common 2016.3.3+ds-3 all
-salt-minion 2016.3.3+ds-3 all
+salt-common 2016.3.4+ds-1 all
+salt-minion 2016.3.4+ds-1 all
-w3m 0.5.3-32 amd64
-w3m-img 0.5.3-32 amd64
+w3m 0.5.3-33 amd64
+w3m-img 0.5.3-33 amd64

diff --git a/apt/apt.conf.d/01autoremove-kernels b/apt/apt.conf.d/01autoremove-kernels
index ebfecece04305034194b16ec9d98cc9a89973a19..a22a4f31b57e3554eede970baae8370203e4d41b 100644 (file)
--- a/apt/apt.conf.d/01autoremove-kernels
+++ b/apt/apt.conf.d/01autoremove-kernels
@@ -26,25 +26,23 @@ APT::NeverAutoRemove
 };
 /* Debug information:
 # dpkg list:
-ii  linux-image-4.6.0-1-amd64            4.6.2-2                     amd64        Linux 4.6 for 64-bit PCs
+rc  linux-image-4.6.0-1-amd64            4.6.2-2                     amd64        Linux 4.6 for 64-bit PCs
 ii  linux-image-4.7.0-1-amd64            4.7.8-1                     amd64        Linux 4.7 for 64-bit PCs (signed)
-iF  linux-image-4.8.0-1-amd64            4.8.5-1                     amd64        Linux 4.8 for 64-bit PCs (signed)
-iU  linux-image-amd64                    4.8+76                      amd64        Linux for 64-bit PCs (meta-package)
+iF  linux-image-4.8.0-1-amd64            4.8.7-1                     amd64        Linux 4.8 for 64-bit PCs (signed)
+ii  linux-image-amd64                    4.8+76                      amd64        Linux for 64-bit PCs (meta-package)
 # list of installed kernel packages:
-4.6.0-1-amd64 4.6.2-2
 4.7.0-1-amd64 4.7.8-1
-4.8.0-1-amd64 4.8.5-1
+4.8.0-1-amd64 4.8.7-1
 # list of different kernel versions:
-4.8.5-1
+4.8.7-1
 4.7.8-1
-4.6.2-2
-# Installing kernel: 4.8.5-1 (4.8.0-1-amd64)
-# Running kernel: 4.7.8-1 (4.7.0-1-amd64)
-# Last kernel: 4.8.5-1
+# Installing kernel: 4.8.7-1 (4.8.0-1-amd64)
+# Running kernel: 4.8.7-1 (4.8.0-1-amd64)
+# Last kernel: 4.8.7-1
 # Previous kernel: 4.7.8-1
 # Kernel versions list to keep:
 4.7.8-1
-4.8.5-1
+4.8.7-1
 # Kernel packages (version part) to protect:
 4\.7\.0-1-amd64
 4\.8\.0-1-amd64

diff --git a/ssl/openssl.cnf b/ssl/openssl.cnf
index 1eb86c40126308376e1c6e816d4988badd369fb8..b3e7444e5f22ef37be939d1cb51dd5dc1aa66acf 100644 (file)
--- a/ssl/openssl.cnf
+++ b/ssl/openssl.cnf
@@ -44,7 +44,7 @@ certs         = $dir/certs            # Where the issued certs are kept
 crl_dir                = $dir/crl              # Where the issued crl are kept
 database       = $dir/index.txt        # database index file.
 #unique_subject        = no                    # Set to 'no' to allow creation of
-                                       # several ctificates with same subject.
+                                       # several certs with same subject.
 new_certs_dir  = $dir/newcerts         # default place for new certs.
 
 certificate    = $dir/cacert.pem       # The CA certificate
@@ -55,7 +55,7 @@ crl           = $dir/crl.pem          # The current CRL
 private_key    = $dir/private/cakey.pem# The private key
 RANDFILE       = $dir/private/.rand    # private random number file
 
-x509_extensions        = usr_cert              # The extentions to add to the cert
+x509_extensions        = usr_cert              # The extensions to add to the cert
 
 # Comment out the following two lines for the "traditional"
 # (and highly broken) format.
@@ -107,7 +107,7 @@ default_bits                = 2048
 default_keyfile        = privkey.pem
 distinguished_name     = req_distinguished_name
 attributes             = req_attributes
-x509_extensions        = v3_ca # The extentions to add to the self signed cert
+x509_extensions        = v3_ca # The extensions to add to the self signed cert
 
 # Passwords for private keys if not present they will be prompted for
 # input_password = secret
@@ -233,11 +233,7 @@ subjectKeyIdentifier=hash
 
 authorityKeyIdentifier=keyid:always,issuer
 
-# This is what PKIX recommends but some broken software chokes on critical
-# extensions.
-#basicConstraints = critical,CA:true
-# So we do this instead.
-basicConstraints = CA:true
+basicConstraints = critical,CA:true
 
 # Key usage: this is typical for a CA certificate. However since it will
 # prevent it being used as an test self-signed certificate it is best
@@ -335,11 +331,11 @@ signer_cert       = $dir/tsacert.pem      # The TSA signing certificate
 certs          = $dir/cacert.pem       # Certificate chain to include in reply
                                        # (optional)
 signer_key     = $dir/private/tsakey.pem # The TSA private key (optional)
-
+signer_digest  = sha256                        # Signing digest to use. (Optional)
 default_policy = tsa_policy1           # Policy if request did not specify it
                                        # (optional)
 other_policies = tsa_policy2, tsa_policy3      # acceptable policies (optional)
-digests                = md5, sha1             # Acceptable message digests (mandatory)
+digests     = sha1, sha256, sha384, sha512  # Acceptable message digests (mandatory)
 accuracy       = secs:1, millisecs:500, microsecs:100  # (optional)
 clock_precision_digits  = 0    # number of digits after dot. (optional)
 ordering               = yes   # Is ordering defined for timestamps?

diff --git a/w3m/config b/w3m/config
index e9d15223691d6a0dbff417514beea1c5bc13f32d..c12153e58a19ac2a9da8b8df2222fc5f5cc154d5 100644 (file)
--- a/w3m/config
+++ b/w3m/config
@@ -65,7 +65,7 @@ extbrowser4 epiphany %s &
 extbrowser5 konqueror %s &
 extbrowser6 curl -L -O -C - %s &
 extbrowser7 wget -c
-extbrowser8 url=%s && printf %s "$url" | xsel && printf %s "$url" | xsel -b
+extbrowser8 url=%s && printf %s "$url" | xsel && printf %s "$url" | xsel -b &
 extbrowser9 mpv %s &
 bgextviewer 1
 use_lessopen 0