News for hackers. Stuff that matters.

A comment on Valkey Turns One: How the Community Fork Left Redis in the Dust. Parent comment

Re:Valkey Turns One: How the Community Fork Left Redis in th... by kijin on Saturday May 31, 2025 @09:08AM (#44144048)
You're right about Debian. Ubuntu is a different story. You're probably better off using an alternative repository for anything important that you find in the "universe" repo. That stuff is not "distro-maintained" at all.

Case in point: there are known vulnerabilities in the version of Redis shipped with Ubuntu 22.04 LTS, which a lot of people would assume is still maintained. But Redis is in universe, so patches are only available for those with an Ubuntu Pro subscription.

[ Parent | on HN ]
Re:Valkey Turns One: How the Community Fork Left Redis in th... by bbarnett on Saturday May 31, 2025 @11:59AM (#44145120)
Debian's contrib and non-free are similar, only 'main' is rigorously shepherded.
[ Parent | on HN ]
Re:Valkey Turns One: How the Community Fork Left Redis in th... by kijin on Sunday June 01, 2025 @06:00AM (#44149773)
Only a small number of packages in Debian belong in contrib and non-free. Redis is safely in main.

Ubuntu throws 90% of its packages in universe and doesn't even bother to pull security fixes from Debian. It's absolutely irresponsible and not comparable to Debian at all.

[ Parent | on HN ]