tl;dr: enable extras-devel, install kernel power 49, pin apt as described here. this will prevent installation of programs from extras-devel repo.

do note that most of the newer versions of programs in extras-devel have loads of new features, and when a bug comes up, it's usually fixed within 2 days. I personally activate extras-devel all the time.