4 ms·

> If you use Ubuntu or Debian, you can forget security Why do you say so?

• cookiengineer 6y ago
  > Why do you say so? (about Debian/Ubuntu) Critical security fixing time is years, not days. Also in practice, a lot of people use PPAs to get work done, and this is a critical component in an audited system.
  • andrewshadura 6y ago
    This is absurdly untrue.
    • cookiengineer 6y ago
      > This is absurdly untrue. I’m just gonna leave these here: [1] https://security-tracker.debian.org/ https://security-tracker.debian.org/ [2] https://security.archlinux.org/ https://security.archlinux.org/ ...then everyone can compare upstream/downstream fixing times for themselves. Remember: “not yet assigned” is equivalent to “not fixed”.