Re: Debian - Release Cadence Options

* Antoine Le Gonidec: " Re: Debian - Release Cadence Options" (Sat, 18 Oct 2025
  14:24:40 +0200):

> Le Sat, Oct 18, 2025 at 04:23:07AM +0200, [email protected] a écrit :
> > (…) Plus,
> > since both don't have a security policy, security issues get (arguably)
> > fixed faster on testing.  
> 
> Beware, if you’re talking unstable vs. testing here, testing is the one
> with the worst security support (= none at all) of all Debian branches.
> 
> Security fixes are provided in unstable as part of packaging new
> upstream releases, and cherry-picked to stable through the dedicated
> security channel. On testing, security fixes do not go through a special
> channel: they trickle down from unstable following the usual rules, so
> with at least a 3 to 5 days delay that can grow to weeks or even months if
> you’re unlucky.

I am using testing with debsecan which for me combines the best of both worlds.


-- 

    Mathias Behrle
    PGP/GnuPG key availabable from any keyserver, ID: 0xD6D09BE48405BBF6
    AC29 7E5C 46B9 D0B6 1C71  7681 D6D0 9BE4 8405 BBF6

-----BEGIN PGP SIGNATURE-----
Comment: Signed by Mathias Behrle

iQIzBAEBCgAdFiEErCl+XEa50LYccXaB1tCb5IQFu/YFAmj0KqwACgkQ1tCb5IQF
u/bn0BAAhtmkdZMPnUf/+81JM71sOHAd3OTbTtAZOTI+JTdcaXJdmBeN1AO2xOuD
IhUhhR1vHKnNXqaojh0m1K6rp6bWTy/pDWu+Xrv28phqqZAObCz1+J6bBGaRiez3
l1ifiLUHF9r8MRfyBMVclZ1+OlnFkB3J/37swpo/nTsyxlXjCYYuLFAT2a+tlQJG
KF7lMQzHGD9WMoaLK7Ijsi+uJsda/tWf2AZyImoUN+rZH+gJnvyXOp6YXQFiDzkr
stm7mn1TO01lV440vv8L9OFI5lZ0lHQugQibpmkHe5RRz+y3CkUUzpb/wb1vcglC
wylNdwAF5PycUEKZ1qOKDhr4YRpWQjTWYuGFs6iJhaZatmup9rhj2GFmvULRu2vR
OLTjbSW6xg28xE0hXVZXLSWM5Hs7oP3yPRPgjMGryqeEhkKSWZGskfv5fr/Yq+UQ
UYrZo8fKyNy6+1+iZ9KDdqWd7NJmDwtdvqlkxZR9lxQj6bEVP43sCLjUlLmpPqcS
5e8cyR4zrjTdbP1rr633Ckt4iASrMjzTuGeHO3EAqDQNd+442KIgzYDly13Nu1+M
JVRuc4FqBaR4/O4xwRXkgnUhemB+Ul2Z/O/BkjGV6lz46gOfKCKB5tZlv3y65f/o
K+ixjN+zFtDlMeJz9Iqb8lbsjfgYlCzKMNDo+J0L8jA9mm2CUng=
=Orrz
-----END PGP SIGNATURE-----