Well, having worked on applications like this, I think it's not totally unreasonable. Of course, could it have been done earlier? Yes. But the backend systems o

Well, having worked on applications like this, I think it's not totally unreasonable. Of course, could it have been done earlier? Yes. But the backend systems of such applications are usually so complicated and with ripple effects through layers that it takes quite a lot of planning to get it right. I am not saying delaying a critical vulnerability patch for 6 months is right, but I think airline systems will typically need that much time to plan it well.