4 ms·
> Nitpick: this not true[0] because some updates I specifically mentioned "security updates", not just any updates. For reasonable software that maintains a st
by segfaultbuserr 6y ago
> Nitpick: this not true[0] because some updates
I specifically mentioned "security updates", not just any updates. For reasonable software that maintains a stable/ESR branch in the form of x.y.z, the .z updates are always bugfixes and security patches, no vendor-forced new feature.
> secrity regressions either embedded in or misrepresented as new features.
If you have this problem, then you've got a bigger trouble to solve... Unfortunately sometimes users have no control over it in many software.
- a1369209993 6y ago> the .z updates are always bugfixes and security patches Fair; I was talking about those updates that are required in order to fix known vulnerabilities. > If you have this problem, then you've got a bigger trouble to solve... Unfortunately sometimes users have no control over it in many software. "Regressions" is probably the wrong word[0], but new features by definition have new bugs in them (they're code that wasn't there before, so the bugs in that code weren't there before); the problem is that some security fixes for the pre-feature-X version aren't available without adding the new bugs introduced in feature-X code. 0: I was aiming for the opposite of update in the sense of adding bugs rather than removing them.