Re: Does Debian needs a big overhaul to how it does things?

On Thu, Aug 20, 2026 at 08:29:14PM +0000, Arnox wrote:
>In this age of rampant AI and rampant AI-created malware, I was 
>thinking about how Debian handles security updates, or more 
>specifically, how it takes a comparatively long time to handle them. 
>For example, I've seen one bad exploit in KDE take at least a month 
>before it was finally pointed out to the Debian team

This doesn't sounds how Debian handles security issues, so it may be more 
useful to clarify what exactly happened, and whether the upstream process 
or the Debian process had problems.

>This also got me thinking about if there is a way somehow for Debian 
>to coordinate and collaborate better with upstream developers in order 
>to ship even more stable packages than before.

Do you have anything specific in mind that is not already done?

>I wonder if many 
>upstream developers just don't want to get involved with pushing 
>software to Debian these days simply because they find it too 
>inconvenient and clunky compared to, say, Arch.

This sounds unrelated to what you discussed before.

-- 
WBR, wRAR

-----BEGIN PGP SIGNATURE-----
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=36eE
-----END PGP SIGNATURE-----