iOS is ultimately composed of a bunch of separate packages.
Is there a good technical reason why a fix to their crypto library couldn't be backported?
This is exactly what Red Hat does, and Debian stable, and it works.
Is there a good technical reason why a fix to their crypto library couldn't be backported?
This is exactly what Red Hat does, and Debian stable, and it works.
Red Hat only back-ports packages because they are paid to do so per their support contracts. And even under RHEL, you may have to upgrade to the latest packages (for your OS version) to receive support.
And anyway, if you don't trust your OS vendor to not try to screw you over (planned obsolescence) in major releases, why would you trust them for any update whatsoever? Lack of vendor trust is not something you solve through packaging.