News for hackers. Stuff that matters.

A comment on Ubuntu 20.04 LTS’ snap obsession has snapped me off of it. Parent comment

Re:Ubuntu 20.04 LTS’ snap obsession has snapped me off of it by danieldk on Saturday May 02, 2020 @12:46PM (#23052970)
Ubuntu security updates do not cover the universe repository, which contains the largest number of packages. The universe repo is 'community-supported', which means that a lot of CVEs are not fixed in practice.

https://people.canonical.com/~ubuntu-security/cve/universe.h...

So, Ubuntu's LTS support is only relevant security-wise if you mostly stick to the main repository.

[ Parent | on HN ]
Re:Ubuntu 20.04 LTS’ snap obsession has snapped me off of it by oarsinsync on Saturday May 02, 2020 @01:04PM (#23053133)
Anyone have any idea what Debian's LTS security posture looks like? Is it also restricted to 'main' and does it also ignore 'contrib' and 'non-free'?
[ Parent | on HN ]
Re:Ubuntu 20.04 LTS’ snap obsession has snapped me off of it by danieldk on Saturday May 02, 2020 @01:16PM (#23053244)
Similar policy:

https://www.debian.org/security/faq#contrib

However most packages in Debian are in main. AFAIK contrib is for FLOSS packages that somehow depend on packages that are not FLOSS.

[ Parent | on HN ]