3 ms·
So this has taught me something I didn't know about all Debian: not all CVEs have the same priority or have to be fixed in point releases. Many CVEs don't even
by jordigh 9y ago
So this has taught me something I didn't know about all Debian: not all CVEs have the same priority or have to be fixed in point releases. Many CVEs don't even get acknowledged by a Debian Security Advisory at all. I guess if I want security to be the utmost priority, I should be using OpenBSD.
- anarazel 9y agoIn this case you probably should just be using postgres' apt repository, which'll carry new releases very promptly.
- jordigh 9y agoKind of the point for me of using Debian is to not have to go shopping around all of the web for packages and because I want to have a uniform packaging standard: Debian Policy. That's why I don't trust anyone but Debian to produce Debian packages. It's a lot of hard work to make sure all packages adhere to a common standard, a standard that upstream distributors will not follow. In this case, however, the Postgres packager is also the Debian packager, so I decided to trust his direct upstream Debian packages and installed them. This is a rare exception, and I don't want to be doing this all the time.