Post #2746146
2026-03-14 15:52 UTC
>Also, if a pkgbuild was updated for security reasons, now Manjaro is putting users at risk by continuing to serve the old version
Hold up, isn't that last point just a criticism of delayed updates in general? By that logic, would Manjaro be putting users at security risk by holding back the main packages?
Replies (2)
-
@thevoidzero@lemmy.world 2026-03-14 20:46
Considering they just hold back packages, but do not do additional testing to release them, yeah, they should not do that. Arch already has testing repo, normal repo packages on arch are already stable enough
-
@teawrecks@sopuli.xyz 2026-03-14 21:51
The difference is they test the core packages they release. That's their selling point. Just downloading old pkgbuilds without vetting anything is called an attack vector.