3 ms·

Well, latest SSH vulnerabilities came from the official repos as well. Sure, those were bugs not evil modifications, but still.

• lmm 11y ago
  Yeah, I know. That was awful and should have resulted in policy changes; it hasn't, and I don't use Debian any more. But it makes a good example of the right approach to package infrastructure.
  • solidpy 11y ago
    Is there a distro with a stronger policy than Debian? what are you using now?
    • lmm 11y ago
      I wouldn't think stronger than Debian, but there are plenty of distros with equivalent policies. At the moment I'm running FreeBSD (not especially for security reasons).