While you're correct, it should be noted that "security backports" are much less complete than they'd have you think. Do NOT take the promises of enterprise di

While you're correct, it should be noted that "security backports" are much less complete than they'd have you think. Do NOT take the promises of enterprise distributors for granted, both because there are a lot of security problems that never get fixed, and because the expertise to sufficiently backport is often lacking (cf. the Debian SSL entropy crisis of some years back). You are usually better off using a newer upstream with the security fix integrated than relying on a distro-pushed backport. For a demonstration, try installing redis from the official Ubuntu repos.