There have been multiple accounts created with the sole purpose of posting advertisement posts or replies containing unsolicited advertising.

Accounts which solely post advertisements, or persistently post them may be terminated.

germanatlas ,
@germanatlas@lemmy.blahaj.zone avatar

no real-world use found for staying more than one version behind

The ssh vulnerability didn’t affect Debian because the packages were too many versions behind

azvasKvklenko ,

AFAIK, the xz vulnerability was designed for Debian based on its workaround fixing systemd service status detection. Even if it shipped to something like Arch, the malicious code wouldn’t load.

cygnus ,
@cygnus@lemmy.ca avatar

Security through Geriatricity

bisby ,

Except this isn’t true at all.

security-tracker.debian.org/…/CVE-2024-6387

Regresshion impacted bookworm and trixie both. Buster was too old.

With the downside of me doing an apt update and seeing that openssh-server was on 1:9.2p1-2+deb12u3 and I had no idea at a glance if this included the fix or not (qualys’s page states version 8.5p1-9.8p1 were vulnerable).

If you are running debian bookworm or trixie, you absolutely should update your openssh-server package.

acockworkorange ,

Isn’t this meme format completely written in sarcasm?

AlexisFR ,
@AlexisFR@jlai.lu avatar

Truly the dumbest meme template of the year.

stepan ,

I like it

Norgur ,
@Norgur@fedia.io avatar

I don't. So... uhm... you're wrong I guess.

abbotsbury ,
@abbotsbury@lemmy.world avatar

This is a pretty old template iirc

rc__buggy ,

It’s so old it’s still shipping in bookworm

Engywuck ,

I know this is just a meme, but the “Stop using xxx!” posts are really annoying.

SpaceNoodle ,

I think the comments calling them annoying are more annoying

unexposedhazard ,

Whaaat, i love them. They are so unpredictable. Sometimes they are fully serious opinions, sometimes only half serious and sometimes just fully ironic shitposts.

WeLoveCastingSpellz ,

I think it is a funny format

marduk ,

The “install lib-blah-blah-blah” bit doesn’t bother me 'cause whenever I need to make something work, I just copy and paste the “sudo apt install …” commands straight from the internet :)

steersman2484 ,

I also never used version pinning in debian

LeroyJenkins ,

Don’t

Erupt

Before

I

Am

Nevada

MNByChoice ,

This is great! No better way to demonstrate how perfect Debian is! Debian for the win!

TheGingerNut ,
@TheGingerNut@lemmy.blahaj.zone avatar

well at least they aren’t trying to make me install snaps, and patching apt so if I sudo apt install firefox it installs the snap version.

noisypine ,

This should be a jailable crime.

TheGingerNut ,
@TheGingerNut@lemmy.blahaj.zone avatar

especially as the hack flows downriver to distros with actual dignity like mint. Like this is pollution of the water supply dog!

Tundra ,

https://lemmy.ml/pictrs/image/4468705f-9592-4c80-ac72-f0eebe0715ad.jpeg

Pyroglyph ,
@Pyroglyph@lemmy.world avatar

Debianties

crispy_kilt ,

Btw I use Debian

lemmyvore ,

I would uninstall the screensaver so fast if I saw a nag screen. Wtf it’s a screensaver, what does it matter? I’ll use a version that’s 50 years old if I want to.

bisby ,

Because the dev gets a huge number of bug reports for bugs that were resolved 5 versions ago.

They actually asked debian to stop shipping the screensaver, because they were getting tired of saying “this is already fixed, debian is just not going to ship the fix for another year”. Debian didn’t want to stop, so the dev added the nag screen, because it was the only way to stop the flood of bug reports for things that were already fixed.

user224 ,
@user224@lemmy.sdf.org avatar

Do people not check what version of software they have and what’s newest (and if the issue exists is a good idea too) before reporting a bug?

bisby ,

Should they? Yes. They should also be searching for previous bug reports. I’m sure a lot of people do. But if you have enough users, even if 1% of people don’t use good reporting behaviors, you wind up with a lot of duplicate or bad reports.

There are plenty of blog posts out there that basically can be summarized as talking about how grueling open source work can be because users are often aggressive in their demands.

But this is a prime example of debian “stable” doesn’t mean “no crashes” but instead it means “unchanging, which means any bugs and crashes will remain for the whole release”

OsrsNeedsF2P ,

Lots of people simply don’t know.

Source: I filed bug reports to Fcitx when I first installed Debian, because I didn’t realize Debian shipped packages from the before the stone ages

Malfeasant ,

Lololololololol. No, they do not. I support a product that gets updated roughly quarterly, and the number of times people complain about their vulnerability scanner finding something when they’re on a 4 year old version is too damn high.

GravitySpoiled ,

.

Rainb0wSkeppy OP ,

’

Sonotsugipaa ,
@Sonotsugipaa@lemmy.dbzer0.com avatar

™

sem ,

Goodbye

mexicancartel ,

hemko ,

I use Debian btw

MagisterSieran ,

3debian5me

NathanClayton ,

KDE? Who needs anything other than FVWM2 or CDE?

OsrsNeedsF2P ,

As someone who loves the old designs (I’ve run Chicago95 for years now), the only thing stopping me from running CDE is it lacks first-class support from any distro I’ve used

possiblylinux127 ,

Oh, Debian!

1000002612

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • [email protected]
  • random
  • lifeLocal
  • goranko
  • All magazines
    •