2 ms·
> Why do you say so? (about Debian/Ubuntu) Critical security fixing time is years, not days. Also in practice, a lot of people use PPAs to get work done, and t
by cookiengineer 6y ago
> Why do you say so? (about Debian/Ubuntu)
Critical security fixing time is years, not days. Also in practice, a lot of people use PPAs to get work done, and this is a critical component in an audited system.
- andrewshadura 6y agoThis is absurdly untrue.
- cookiengineer 6y ago> This is absurdly untrue. I’m just gonna leave these here: [1] https://security-tracker.debian.org/ https://security-tracker.debian.org/ [2] https://security.archlinux.org/ https://security.archlinux.org/ ...then everyone can compare upstream/downstream fixing times for themselves. Remember: “not yet assigned” is equivalent to “not fixed”.