7 ms·
Let's see how long it takes Fedora to deploy an update...
by cozzyd 7y ago
Let's see how long it takes Fedora to deploy an update...
- viraptor 7y agoBeing built already: https://koji.fedoraproject.org/koji/buildinfo?buildID=1289780 https://koji.fedoraproject.org/koji/buildinfo?buildID=128978...
- metta2uall 7y agoI'm grateful to QubesOS for being able to easily browse in a disposable VM whilst waiting for the build. Even without QubesOS starting a disposable VM manually is probably worth the effort..
- AdmiralAsshat 7y agoIt's easy to get mad at Fedora when we don't have the latest-greatest at the time the announcement drops. But they hold the packages so that they can do additional QA beyond what Mozilla has already done and protect their users. I'm sometimes disappointed, but after seeing some of the bugs they've caught during the Fedora-specific testing/QA builds, I can understand why they do it.
- jamesgeck0 7y agoDelaying zero-day security patches for any length of time doesn't protect users.
- AdmiralAsshat 7y agoI don't like dealing in absolutes. There are valid reasons to hold a security patch for some period of time if the cure is worse than the poison. See, for example, some of the early Spectre/Meltdown mitigations that caused a 20% performance hit.
- lunchables 7y agoAre you implying that Fedora has some history of being slow to update security vulnerabilities?
- cozzyd 7y agoNo, just genuine curiosity since I use Fedora systems and updating manually is much more work.