4 ms·

Hmm.. that is not what I meant. Rephrased it to "Any suggestions which distro takes security serious?" now. Since it seems that Debian has decided to not patch

Hmm.. that is not what I meant. Rephrased it to "Any suggestions which distro takes security serious?" now. Since it seems that Debian has decided to not patch Chromium for months now, how do I know they won't do the same for Firefox at some point? Or any other software in their repos? I would prefer a distro which promises to keep all software in their repos secure for a certain amount of time. Even if that means having fewer packages than other distros.

amelius 5y ago
Good question. Perhaps NixOS, because it allows you to easily compile your own packages (?)
- edoceo 5y ago
  You're just compiling the same broken code.
  - amelius 5y ago
    The idea is that you download the most recent version of the source code of the package.
    - tossaway9000 5y ago
      Its the same problem just at a different point in time. The latest code introduces the latest bugs and security vulnerabilities too.
    - edoceo 5y ago
      I'm on Gentoo 15+ years, am familiar with this theory and process.
easton 5y ago
Why don't they keep Chromium up to date like they do with Firefox? Ubuntu (to my knowledge) exempts browsers from their LTS policy because of security fixes being bundled with feature updates.
omnicognate 5y ago
If bang up to date software is what matters to you, Debian's the opposite of what you want. Maybe try Arch, which operates a rolling release approach and is well known for following the bleeding edge. FWIW, its firefox [1] and chromium [2] packages are currently at the latest versions and were both published on the day of the upstream release. [1] https://archlinux.org/packages/extra/x86_64/firefox/ https://archlinux.org/packages/extra/x86_64/firefox/ [2] https://archlinux.org/packages/extra/x86_64/chromium/ https://archlinux.org/packages/extra/x86_64/chromium/ (latest update was 24th sept, but there was also a 94 version published on 21st, the day of the stable release)

amelius 5y ago

Good question. Perhaps NixOS, because it allows you to easily compile your own packages (?)

edoceo 5y ago
You're just compiling the same broken code.
- amelius 5y ago
  The idea is that you download the most recent version of the source code of the package.
  - tossaway9000 5y ago
    Its the same problem just at a different point in time. The latest code introduces the latest bugs and security vulnerabilities too.
  - edoceo 5y ago
    I'm on Gentoo 15+ years, am familiar with this theory and process.

easton 5y ago

Why don't they keep Chromium up to date like they do with Firefox? Ubuntu (to my knowledge) exempts browsers from their LTS policy because of security fixes being bundled with feature updates.

omnicognate 5y ago

If bang up to date software is what matters to you, Debian's the opposite of what you want. Maybe try Arch, which operates a rolling release approach and is well known for following the bleeding edge. FWIW, its firefox [1] and chromium [2] packages are currently at the latest versions and were both published on the day of the upstream release. [1] https://archlinux.org/packages/extra/x86_64/firefox/ https://archlinux.org/packages/extra/x86_64/firefox/ [2] https://archlinux.org/packages/extra/x86_64/chromium/ https://archlinux.org/packages/extra/x86_64/chromium/ (latest update was 24th sept, but there was also a 94 version published on 21st, the day of the stable release)