4 ms·
Backporting security fixes is forking the software though. There have been instances where upstream and Debian frozen version have drifted far enough apart tha
by anecdotal1 4y ago
Backporting security fixes is forking the software though.
There have been instances where upstream and Debian frozen version have drifted far enough apart that the security backport was done incorrectly and introduced a new CVE. Off the top of my head this happens for Apache more than once.
I for one appreciate the BSD "OS and packages are separate" so my software can be updated but my OS is stable
- diffeomorphism 4y agoFor apache I never heard about that. Instead the issue I heard about was that debian organises/manages apache quite differently, nothing about version drift. > BSD No thanks, I want my software to be stable too.