Comment by gilrain

6 hours ago

RHEL also got the PHP patches hours after Debian.

I chose AlmaLinux last time I needed to, and it's been a great way to access the ecosystem — I heartily recommend it as a free RHEL! — but these past few days have me looking in envy at Debian. Corporate stability hasn't been what I expected.

5 comments

gilrain

Reply
mesrik  4 hours ago

Red Hat patching slowness and upgrades from major version to next were reasons I gave up after 16 years using their distributions, including RHEL.

I had to fall back patching, repackaging and maintaining multiple times while waiting sometimes weeks them to issue fixed packages. I don't know what happened to Red Hat over the years, already before IBM purchased them. But they became too slow on this kind of issues.

Debian consistently provided fixes quickly next day at least and I never had any issues upgrades since from 7 to 12, when I retired. Only reason to do complete reinstall was that ext3 and ext4 disk formats had improvements, which made life bit easier with 64bit systems.

ps. No problems from 12 to 13 any more with my own systems at home.

t0mas88  5 hours ago

Commercial support in Linux seems to be loosing its advantage over Debian.

Ubuntu (including Ubuntu Pro) still doesn't have a CVE-2026-99999 patch while Debian does have it. For commercial operators a KVM guest escape vulnerability is quite important.

l00sed  5 hours ago

I honestly think you're better off with RHEL. They might have been slow to act in this situation, but do one scan on a Debian vs a RHEL system container image and I'm confident Debian's will show a lot more red than RHEL (even with the fedora)

  • jcgl  5 hours ago

    I remember RHEL being quite slow with copyfail as well. It'd be nice to have some more comprehensive statistics though.

    And I don't put a lot of faith in container scans as a metrics. (More properly, I don't have faith in most containers scanners to properly identify package versions and backports.)

  • gilrain  3 hours ago

    I'm sticking with the RHEL ecosystem for now, but it's now more out of inertia than a feeling that I gain much by it being the corporate standard. It's gone from "by choice" to "by habit".