> I really like Trisquel. But I am annoyed that updates of important
> programs (like Libreoffice) are not available - you only have to add
> package sources.  It is not that there are no current Linx versions of
> the programs - they are only made unavailable by Trisquel. If you
> don't search yourself, you won't get security updates or only very
> late.  That's what I'm criticizing.

While I also wish that Trisquel development moved more quickly, you seem
to have a common misconception about LTS distributions.  Whereas with
proprietary software, the only way to get security updates is usually
to use the latest version for the developer (which might introduce
unwanted changes or new bugs and/or vulnerabilities), with free
software, distro maintainers can backport security patches and other
fixes to older versions of the software.  This allows for the distro to
remain stable while still receiving bug and security fixes.

Trisquel 8 is based on Ubuntu 16.04, xenial.  As you can see from the
changelog,[1] the xenial version of Libreoffice *does* receive frequent
updates patching security vulnerabilities, so you do not need to upgrade
to a newer version of Libreoffice to get these security fixes.  In fact,
upgrading to a newer version comes with the risk of introducing new
security vulnerabilities that haven't been caught and fixed yet in the
newer version.  If you require some new feature of Libreoffice then
that's a good reason to go out-of-repo, but if you are only concerned
with security then you should use the stable package provided by the
repo.

[1]
http://changelogs.ubuntu.com/changelogs/pool/main/libr/libreoffice/libreoffice_5.1.6~rc2-0ubuntu1~xenial10/changelog

Attachment: signature.asc
Description: PGP signature

Reply via email to