4 ms·
The python libraries packaged by Debian are provably more secure or stable: they receive security backports while also not receiving feature updates. The combi
by goodpoint 5y ago
The python libraries packaged by Debian are provably more secure or stable: they receive security backports while also not receiving feature updates.
The combination of this 2 aspects is what provides better stability and better security.
> It’s essentially like version locking packages except some random Debian maintainer decides when it’s time to update.
Not at all.
- maple3142 5y agoI am not sure if Debian can really keep give packages security updates without feature updates. For example, Debian packaged Chromium seems really outdated and having many unpatched CVEs: https://security-tracker.debian.org/tracker/source-package/chromium https://security-tracker.debian.org/tracker/source-package/c...
- goodpoint 5y ago...and it's being removed for that reason.
- plorkyeran 5y agoThat is not "provably more secure or stable". I think it's pretty safe to assume that maintainers backporting security fixes is more secure than just not updating at all, but even that isn't proven. It being more secure than updating is much more questionable, and is probably going to vary greatly between packages.
- goodpoint 5y agoCitation needed. Not only Debian, but Red Hat, Suse, Canonical and others provide both free and paid security updates and many large companies are happy to pay quite a pretty penny for that.