3 ms·
A decade of CVE coverage for all of universe? Colour me skeptical that they can actually pull that off.
by cmsj 4y ago
A decade of CVE coverage for all of universe? Colour me skeptical that they can actually pull that off.
- zepearl 4y agoMaybe I don't fully understand this: does this mean that they would manually backport/reimplement fixes to whichever (old) version of software X that has implemented security fixes for its higher version (but not for the lower version used by the "Ubuntu Pro version Y", assuming that Ubuntu Pro would stick to a specific version of software X)?
- jacooper 4y agoYes, that's what backporting is. Porting a patch back to an older version. Since Ubuntu and Debian preserve stability by not doing any feature upgrades. Which is done apperantly differently in RHEL land, podman gets updated to the latest version regularly, I couldn't find a clear answer to RHEL's update policy and how it works. Ubuntu also has exceptions for packages like Firefox, which need to get updated often, and is something Debian struggles with regularly. However Ubuntu is snapping up everything lately, I was surprised the `pro` utility was a normal package instead of a snap.
- jacooper 4y agoAlso they support complete Software projects, like WordPress, which is truly impressive. I dont know how they will do it, especially when comparing with RHEL, which only supports around 3000 packages, and then you have to rely on EPEL which has "community" support.