Security vs stability

[helpmhost]

Hi,

Our current servers use various linux distros. However, I am looking for the most stable, secure, and reliable server OS. I believe (from everythin I heard) that Debian is my answer (I am not looking to have a linux distro comparison).

My question is as follows.

For security reasons, I know it is best to use the latest packages and server software (eg. apache, bind, openssh). However, for stability I have read many times that debian is so stable because it uses older software versions that are knowned to be reliable.

Am I right in saying that we are forced to make a trade off of either security or stability?

[Vergil83]

nope!

Debian stable has security updates. So if a new version of apache has a bug fix, debian will apply that fix to the old version. All you will do it

apt-get update
apt-get upgrade

and it will get and install the security fixies

[Roxoff]

Vergil83 is right. The trade off is normally between most-up-to-date-features v stability.

Along with Debian, some of the major distros have 'server' version of their OS, which are paid-for versions with update support. Redhat and Suse both have a variety of these, you may want to check them out, too.

[Gullible Jones]

Slackware. Up-to-date, stable as a rock.

(FreeBSD has a similar reputation, but I assume you're after a Linux distro.)