debian's package manager is still broken, who thought it was a good idea to ship unpatched vulns for months on end? archlinux is looking better by the day...