3 ms·
You're right about Debian. Ubuntu is a different story. You're probably better off using an alternative repository for anything important that you find in the "
by kijin 1y ago
You're right about Debian. Ubuntu is a different story. You're probably better off using an alternative repository for anything important that you find in the "universe" repo. That stuff is not "distro-maintained" at all.
Case in point: there are known vulnerabilities in the version of Redis shipped with Ubuntu 22.04 LTS, which a lot of people would assume is still maintained. But Redis is in universe, so patches are only available for those with an Ubuntu Pro subscription.
- b112 1y agoDebian's contrib and non-free are similar, only 'main' is rigorously shepherded.
- kijin 1y agoOnly a small number of packages in Debian belong in contrib and non-free. Redis is safely in main. Ubuntu throws 90% of its packages in universe and doesn't even bother to pull security fixes from Debian. It's absolutely irresponsible and not comparable to Debian at all.