Given the claim &quot;Ubuntu has a number of vulnerabilities that are patched in Debian,&quot; I am unsure of how &quot;Debian has unpatched vulnerabilities too&quot; is supposed to make me feel better, given that Debian is an upstream of Ubuntu and so presumably those are ALSO unpatched in Ubuntu.