I want my Server to run unattended-upgrades
regularly and keep my server auto updated and install only security updates.
But I don't want to update the main versions of several packages.
For Example:
I want my server to have PHP 5.4 running I am OK with minor updates such as:
- 5.4.30 to 5.4.37 or 5.4.xx to 5.4.yy
But I don't want to change the main version updates, such as:
- 5.4.48 to 5.5.1 or 5.x.a to 5.y.a
Can this be done with unattended-upgrades
?
Right now what I have done is exclude PHP5-* from being auto updated by unattended-upgrades. Is there a better way to do this?
Or is there a standard on Ubuntu Security Updates, like they do not upgrade the main version of an application, such as 5.4.48 to 5.5.1 or 5.x.a to 5.y.a, etc