Posted Mar 30, 2011 10:08 UTC (Wed) by Cato (subscriber, #7643)
[Link]
That was 6 years ago, so I hope Debian's security update process is better sorted out now.
Ubuntu server also looks quite good given its 5 year support lifetime and generally quick updates, plus the option of paying for support on a few critical servers - sort of like CentOS+RHEL combined as there are no software differences between the free and paid-support versions. If only there was cPanel support for typical users - still at least a year away in the cPanel roadmap: http://forums.cpanel.net/f145/debian-support-ubuntu-serve...
Supporting CentOS
Posted Mar 31, 2011 14:10 UTC (Thu) by seyman (subscriber, #1172)
[Link]
<p><em>That was 6 years ago, so I hope Debian's security update process is better sorted out now.</em></p>
Posted Mar 31, 2011 14:11 UTC (Thu) by seyman (subscriber, #1172)
[Link]
That was 6 years ago, so I hope Debian's security update process is better sorted out now.
I don't know. Since then, we've had the openssl fiasco and the reaction to Bugzilla security fixes leaves me thinking that Debian still has problems with security updates.
Supporting CentOS
Posted Apr 1, 2011 0:14 UTC (Fri) by Lennie (subscriber, #49641)
[Link]
I think the OpenSSL fiasco wasn't just Debian, I think the OpenSSL had a part in that too.
Supporting CentOS
Posted Apr 1, 2011 8:05 UTC (Fri) by seyman (subscriber, #1172)
[Link]
The problem isn't so much who's to blame but the fact that Debian does, on occasion, have the problems that Centos is having right now.
Supporting CentOS
Posted Apr 1, 2011 12:28 UTC (Fri) by zack (subscriber, #7062)
[Link]
You know, Debian is an almost 18-year old distro and the episode you're pointing at is 6 years old. By looking at Debian's past you can find *many* mistakes, statistically many more than those you could find in the history of a younger distribution.
From Debian's mistakes, many distros out there have learned how do better. Including Debian.
You can find the current track record of Debian security updates at http://www.debian.org/security/ (which, just as an example, shows an average of more than 1 update/day for March 2011).
-- Stefano Zacchiroli
Supporting CentOS
Posted Apr 1, 2011 12:37 UTC (Fri) by rahulsundaram (subscriber, #21946)
[Link]
That's not a very useful metric. It shows Debian is actively releasing updates that fix security issues but doesn't help show that issues are being handled in a timely fashion. If a distro wants to publish metrics for security errata, look at