3 ms·
Older dependencies, of course, might contain security vulnerabilities that have been patched in more recent version updates. Its a frustrating choice: stay on o
by pcl 4y ago
Older dependencies, of course, might contain security vulnerabilities that have been patched in more recent version updates. Its a frustrating choice: stay on old versions and risk exposure to old vulns, or stay up-to-date and risk supply chain attacks.
- goodpoint 4y agoNo, it's the very opposite. Vulnerabilities can be discovered in released software, but new vulnerabilities are only introduced in new releases. Security fixes are backported by the distro. Over time, stable distributions become and remain more secure than cutting edge software.