[Trisquel-users] Quickness of security updates - too slow to fix important software in a timely manner?

[kudipol]

Hello

As much as I like the idea behind trisquel there is one major concern I'd  
like to address: security updates

It seems that security updates take a long time to show up. For example: the  
recent firefox version is 31.3 esr. It fixes three critical security problems  
and was released on the 25.11.2014. Until today (06. December 2014) this  
update is not available for trisquels icecat. Debian released it on 03.  
December 2014.

So I wonder how safe the users really are using trisquel and browsing the  
web. Given the importance of these fixes the question is: what is the lesser  
of the two problems - using another distro which might not be free in terms  
of the gnu philosophy but fixes security problems in time or using trisquel  
with open holes? Please keep in mind that these problems might affect other  
and maybe more critical software that is used in trisquel (kernel, ssl etc.)  
- though I cannot say how the update process is for these.


Is this a known problem to the devs? Are there any plans to reduce problems  
like that.