>
Can you clarify: does it have fewer CVEs because
Devuan is Debian without systemd and I believe it is explained by the fact that systemds coding standards are quite poor which is confirmed by analysing atleast some of the bugs. Is some explained by more new code and attention; probably. The xz compromising ssh issue was also not an issue for Devuan due to not using systemd components at all. -- Regards, Kc