Their security updates are some of the best you could find, my friend. They are only “slow” on features. Debian doesn’t fuck around when it comes to security.
debian’s security updates are faster than Arch’s, Ubuntu’s and many more, you seem to not understand what the “stable” in “stable distro” means, please, this has nothing with security updates
If that server includes the security repository in its source files, I disagree. In fact, the use of the security repository in Debian has a history spanning more than 20 years.
Due to slow update cadence it’s not a great idea for a server exposed to the internet
Their security updates are some of the best you could find, my friend. They are only “slow” on features. Debian doesn’t fuck around when it comes to security.
debian’s security updates are faster than Arch’s, Ubuntu’s and many more, you seem to not understand what the “stable” in “stable distro” means, please, this has nothing with security updates
If that server includes the security repository in its source files, I disagree. In fact, the use of the security repository in Debian has a history spanning more than 20 years.
Until some fucking php vulnerability grants root access
If you are speaking about the latest php bug, debian stable and old stable were updated days ago, see https://security-tracker.debian.org/
it might be a failure to read on my part but this reads as unfixed on Debian but fixed on Arch
Edit: Oh, yeah ok, in the security repo it’s fixed, why is the vulnerable version distributed to stable though?
would arch have fixed this? no, what is your point?
Eh. They’re actually pretty on top of security patches for pretty much any internet-exposed server software.
The OpenSSL incident was a long time ago at this point.