How quickly are Debian security patches moved to “stable”? [on hold]What flags are used to compile debian stable packages?Debian unstable chroot security issuesAutomatic security updates on Debian squeeze serverHow long are Debian stable releases supported? like Debian WheezyReason for security repositories in Debian?Will old stable in debian receive non-security updates after the release of stable?Automated kernel recompilation on security patches?Debian Security Updatesahci: nvme remap support patches and debian-stableDebian security kernel release?
Avoiding estate tax by giving multiple gifts
How long to clear the 'suck zone' of a turbofan after start is initiated?
Applicability of Single Responsibility Principle
Is `x >> pure y` equivalent to `liftM (const y) x`
Is there a korbon needed for conversion?
Where does the Z80 processor start executing from?
Increase performance creating Mandelbrot set in python
Term for the "extreme-extension" version of a straw man fallacy?
Lay out the Carpet
Return the Closest Prime Number
Customer Requests (Sometimes) Drive Me Bonkers!
Class Action - which options I have?
How to run a prison with the smallest amount of guards?
How do I rename a Linux host without needing to reboot for the rename to take effect?
How does Loki do this?
Do sorcerers' Subtle Spells require a skill check to be unseen?
Would this custom Sorcerer variant that can only learn any verbal-component-only spell be unbalanced?
Is oxalic acid dihydrate considered a primary acid standard in analytical chemistry?
India just shot down a satellite from the ground. At what altitude range is the resulting debris field?
CREATE opcode: what does it really do?
A particular customize with green line and letters for subfloat
How can I kill an app using Terminal?
How can I get through very long and very dry, but also very useful technical documents when learning a new tool?
Pole-zeros of a real-valued causal FIR system
How quickly are Debian security patches moved to “stable”? [on hold]
What flags are used to compile debian stable packages?Debian unstable chroot security issuesAutomatic security updates on Debian squeeze serverHow long are Debian stable releases supported? like Debian WheezyReason for security repositories in Debian?Will old stable in debian receive non-security updates after the release of stable?Automated kernel recompilation on security patches?Debian Security Updatesahci: nvme remap support patches and debian-stableDebian security kernel release?
Debian is known for its stability. As they require rigorous testing, packages are known to take a long time to become Stable, comparing to other distributions.
In light of the extended review duration, do the security patches of general (non-core) packages have to survive a long wait before entering Stable?
The possibility of the creation of zero-day exploits (by referencing the latest version of a software) during the testing period to compromise an older version in the stable repository seems worrying.
Disregarding the effect of additional software such as SELinux, does the lengthened period impose a security disadvantage, comparing to other distributions?
debian security
edited yesterday
Stephen Kitt
178k24405481
asked 2 days ago
user343598user343598
112
New contributor
user343598 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
put on hold as primarily opinion-based by Jeff Schaller♦, GAD3R, Rui F Ribeiro, Stephen Harris, jimmij yesterday
Many good questions generate some degree of opinion based on expert experience, but answers to this question will tend to be almost entirely based on opinions, rather than facts, references, or specific expertise. If this question can be reworded to fit the rules in the help center, please edit the question.
add a comment |
Debian is known for its stability. As they require rigorous testing, packages are known to take a long time to become Stable, comparing to other distributions.
In light of the extended review duration, do the security patches of general (non-core) packages have to survive a long wait before entering Stable?
The possibility of the creation of zero-day exploits (by referencing the latest version of a software) during the testing period to compromise an older version in the stable repository seems worrying.
Disregarding the effect of additional software such as SELinux, does the lengthened period impose a security disadvantage, comparing to other distributions?
debian security
edited yesterday
Stephen Kitt
178k24405481
asked 2 days ago
user343598user343598
112
New contributor
user343598 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
put on hold as primarily opinion-based by Jeff Schaller♦, GAD3R, Rui F Ribeiro, Stephen Harris, jimmij yesterday
Many good questions generate some degree of opinion based on expert experience, but answers to this question will tend to be almost entirely based on opinions, rather than facts, references, or specific expertise. If this question can be reworded to fit the rules in the help center, please edit the question.
1
What's long to you might be short to someone else; besides, the answer may vary depending on variation situations. Can you narrow your question down considerably?
– Jeff Schaller♦
2 days ago
add a comment |
Debian is known for its stability. As they require rigorous testing, packages are known to take a long time to become Stable, comparing to other distributions.
In light of the extended review duration, do the security patches of general (non-core) packages have to survive a long wait before entering Stable?
The possibility of the creation of zero-day exploits (by referencing the latest version of a software) during the testing period to compromise an older version in the stable repository seems worrying.
Disregarding the effect of additional software such as SELinux, does the lengthened period impose a security disadvantage, comparing to other distributions?
debian security
edited yesterday
Stephen Kitt
178k24405481
asked 2 days ago
user343598user343598
112
New contributor
user343598 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
Debian is known for its stability. As they require rigorous testing, packages are known to take a long time to become Stable, comparing to other distributions.
In light of the extended review duration, do the security patches of general (non-core) packages have to survive a long wait before entering Stable?
The possibility of the creation of zero-day exploits (by referencing the latest version of a software) during the testing period to compromise an older version in the stable repository seems worrying.
Disregarding the effect of additional software such as SELinux, does the lengthened period impose a security disadvantage, comparing to other distributions?
debian security
debian security
edited yesterday
Stephen Kitt
178k24405481
asked 2 days ago
user343598user343598
112
New contributor
user343598 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
edited yesterday
Stephen Kitt
178k24405481
asked 2 days ago
user343598user343598
112
New contributor
user343598 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
edited yesterday
Stephen Kitt
178k24405481
edited yesterday
Stephen Kitt
178k24405481
edited yesterday
Stephen Kitt
178k24405481
178k24405481
asked 2 days ago
user343598user343598
112
New contributor
user343598 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked 2 days ago
user343598user343598
112
asked 2 days ago
user343598user343598
112
112
New contributor
user343598 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
user343598 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
user343598 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
put on hold as primarily opinion-based by Jeff Schaller♦, GAD3R, Rui F Ribeiro, Stephen Harris, jimmij yesterday
Many good questions generate some degree of opinion based on expert experience, but answers to this question will tend to be almost entirely based on opinions, rather than facts, references, or specific expertise. If this question can be reworded to fit the rules in the help center, please edit the question.
put on hold as primarily opinion-based by Jeff Schaller♦, GAD3R, Rui F Ribeiro, Stephen Harris, jimmij yesterday
Many good questions generate some degree of opinion based on expert experience, but answers to this question will tend to be almost entirely based on opinions, rather than facts, references, or specific expertise. If this question can be reworded to fit the rules in the help center, please edit the question.
1
What's long to you might be short to someone else; besides, the answer may vary depending on variation situations. Can you narrow your question down considerably?
– Jeff Schaller♦
2 days ago
add a comment |
1
What's long to you might be short to someone else; besides, the answer may vary depending on variation situations. Can you narrow your question down considerably?
– Jeff Schaller♦
2 days ago
1
1
What's long to you might be short to someone else; besides, the answer may vary depending on variation situations. Can you narrow your question down considerably?
– Jeff Schaller♦
2 days ago
What's long to you might be short to someone else; besides, the answer may vary depending on variation situations. Can you narrow your question down considerably?
– Jeff Schaller♦
2 days ago
add a comment |
1 Answer
1
active
oldest
votes
Security fixes enter Debian stable as soon as possible, given a number of constraints (in particular, coordinated disclosure in some cases, and the time it takes to build updated packages). They don’t undergo the usual unstable → testing → stable migration.
Look at the latest Firefox security update: it was announced by Mozilla on March 22, and made available in Debian stable on March 24.
This does mean that there are sometimes regressions, which are fixed in a follow-up update as soon as possible.
See the Debian security page for details of the processes and timelines.
answered yesterday
Stephen KittStephen Kitt
178k24405481
add a comment |
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Security fixes enter Debian stable as soon as possible, given a number of constraints (in particular, coordinated disclosure in some cases, and the time it takes to build updated packages). They don’t undergo the usual unstable → testing → stable migration.
Look at the latest Firefox security update: it was announced by Mozilla on March 22, and made available in Debian stable on March 24.
This does mean that there are sometimes regressions, which are fixed in a follow-up update as soon as possible.
See the Debian security page for details of the processes and timelines.
answered yesterday
Stephen KittStephen Kitt
178k24405481
add a comment |
Security fixes enter Debian stable as soon as possible, given a number of constraints (in particular, coordinated disclosure in some cases, and the time it takes to build updated packages). They don’t undergo the usual unstable → testing → stable migration.
Look at the latest Firefox security update: it was announced by Mozilla on March 22, and made available in Debian stable on March 24.
This does mean that there are sometimes regressions, which are fixed in a follow-up update as soon as possible.
See the Debian security page for details of the processes and timelines.
answered yesterday
Stephen KittStephen Kitt
178k24405481
add a comment |
Security fixes enter Debian stable as soon as possible, given a number of constraints (in particular, coordinated disclosure in some cases, and the time it takes to build updated packages). They don’t undergo the usual unstable → testing → stable migration.
Look at the latest Firefox security update: it was announced by Mozilla on March 22, and made available in Debian stable on March 24.
This does mean that there are sometimes regressions, which are fixed in a follow-up update as soon as possible.
See the Debian security page for details of the processes and timelines.
answered yesterday
Stephen KittStephen Kitt
178k24405481
Security fixes enter Debian stable as soon as possible, given a number of constraints (in particular, coordinated disclosure in some cases, and the time it takes to build updated packages). They don’t undergo the usual unstable → testing → stable migration.
Look at the latest Firefox security update: it was announced by Mozilla on March 22, and made available in Debian stable on March 24.
This does mean that there are sometimes regressions, which are fixed in a follow-up update as soon as possible.
See the Debian security page for details of the processes and timelines.
answered yesterday
Stephen KittStephen Kitt
178k24405481
edited yesterday
answered yesterday
Stephen KittStephen Kitt
178k24405481
answered yesterday
Stephen KittStephen Kitt
178k24405481
answered yesterday
Stephen KittStephen Kitt
178k24405481
178k24405481
add a comment |
add a comment |
1
What's long to you might be short to someone else; besides, the answer may vary depending on variation situations. Can you narrow your question down considerably?
– Jeff Schaller♦
2 days ago