Hi
https://lpsolit.wordpress.com/2011/03/04/debian-takes-security-very-serio...
" And people often come on IRC asking us for help, because their
Bugzilla package provided with their Linux distro is broken or behaves
in a weird way (typically a broken configuration or customization). And
guess what? Most of the time, they use the Debian package. Yes, very
seriously! For comparison, Fedora updated their Bugzilla packages the
day after we released 3.6.4, and Mandriva the week after! It looks like
they take security a bit more seriously."
Rahul