2 ms·

I agree, it does harm. In principle if everyone used their distro packages for things like...say, Wordpress, we wouldn't have as many vulnerable installations

by nly 13y ago

I agree, it does harm. In principle if everyone used their distro packages for things like...say, Wordpress, we wouldn't have as many vulnerable installations on the web (see: NHS). How many people actually use the wordpress package from their distro rather than just uploading a private copy to their webdoc root? Instead blog admins have to log in to their control panel and perform a (hopefully working) auto update there, and then have to shell in to upgrade other important things like PHP.

_ak 13y ago
Have you ever seen how Debian et al package web software? According to the LSB FHS, and that's not only a lot of additional work that requires testing, and goes against how e.g. WordPress tackles the update functionality on their own.
- nly 13y ago
  Looks pretty reasonable to me, they even provide a setup program of some kind and what is presumably default htaccess rules. https://packages.debian.org/sid/all/wordpress/filelist https://packages.debian.org/sid/all/wordpress/filelist for comparison: https://www.archlinux.org/packages/community/any/wordpress/ https://www.archlinux.org/packages/community/any/wordpress/ What's wrong with it? The fault is that of PHP developers for not seeing their distributables as system software.