This is a problem with relying on APT for security fixes anyways.<p>It&#x27;s been particularly bad in the past for things like nginx, where we&#x27;ve known about memory corruption bugs for multiple days and had clients who were incapable of patching because they only had infrastructure for downloading packages.<p>You should have tools in place to build, from source, anything that might be a significant security issue.