3 ms·
this is kinda correct, you won't be able to get it like that out of the box anymore in jessie stable, but you will be able to get it in unstable or by adding ba
by orik 11y ago
this is kinda correct, you won't be able to get it like that out of the box anymore in jessie stable, but you will be able to get it in unstable or by adding back ports to your system.
they think it's too insecure to include in stable.
- iMerNibor 11y agoIt's too time consuming to figure out which patches to apply to be able to maintain it rather in case any security issues pop up
- duskwuff 11y agoNot so much that it's "insecure" in general; more that upstream has made it infeasible for Debian to provide backported security patches for a stable version.
- technomancy 11y agoI'm not sure there's a difference in practice. Sure it's not that there are known problems, but security isn't a thing you have or don't have; it's a process. If your process for identifying and fixing security flaws is broken, that's insecure.
- duskwuff 11y agoUpstream is patching security flaws just fine. The problem is that you can't get the security fixes alone; they only come along with version updates, which Debian stable doesn't want.
- technomancy 11y agoI understand this; I'm saying that a security process that ignores users who value stability over the latest hotness is broken for all use cases I actually care about.
- deleted 11y ago[deleted]
- lucb1e 11y ago> you won't be able to get it like that out of the box anymore in jessie stable Yes you will, it's just an old version without security updates. > but you will be able to get it in unstable No you won't, Stretch is the current unstable and elasticsearch is going to be removed from it.