Re: security in testing

[Sven Luther <sven.luther@wanadoo.fr>]

On Wed, May 14, 2003 at 10:19:08AM -0400, Matt Zimmerman wrote:
> There are already very clear statements about this.
> 
> http://www.debian.org/releases/
> 
> testing
>     The ``testing'' distribution contains packages that haven't been
> accepted into a ``stable'' release yet, but they are in the queue for that.
> The main advantage of using this distribution is that it has more recent
> versions of software, and the main disadvantage is that it's not completely
> tested and <<<has no official support from Debian security team>>>.
> 
> (emphasis added)
> 
> http://www.debian.org/security/faq
> 
> Q: How is security handled for testing and unstable?
> 
> A: The short answer is: it's not. Testing and unstable are rapidly moving
> targets and the security team does not have the resources needed to properly
> support those. If you want to have a secure (and stable) server you are
> strongly encouraged to stay with stable. However, the security secretaries
> will try to fix problems in testing and unstable after they are fixed in the
> stable release.

What is missing is a statement warning users that testing is less secure
than unstable.

Friendly,

Sven Luther