3 ms·

I'm not sure I agree. To quote one of the cases: >For example, at some point, Debian updated the fontconfig package by backporting an upstream fix for a memory

I'm not sure I agree. To quote one of the cases: >For example, at some point, Debian updated the fontconfig package by backporting an upstream fix for a memory leak. Unfortunately, the fix contained a bug that would crash Firefox and possibly other software too. We spotted the new crash only six days after the change landed in Debian sources and only a couple of weeks afterwards the issue had been fixed both upstream and in Debian. We sent reports and fixes to other projects too including Mesa, GTK, glib, PCSC, SQLite and more. That sounds a lot like Linus' "many eyes make all bugs shallow" idea working as intended.

gsvelto 5y ago
Yes, that's one of the benefits. Firefox has a very large user-base compared to other FOSS projects so we will often spot bugs that others haven't noticed simply thanks to the sheer volume of crash reports we get.
eikenberry 5y ago
Even more to the point is that these bugs were found in Debian's unstable/testing distribution. Reiterating that the release process is happening as it should and the bugs are being found by people who volunteered to help test the software.