8-14 months for bugfixes to what exactly? All the serious packages you use in most servers are installed via packages/ports. What's actually in the base system

8-14 months for bugfixes to what exactly? All the serious packages you use in most servers are installed via packages/ports. What's actually in the base system that isn't (a) also in ports or (b) needs upgrades more frequent than to as frequent as Fedora (which is 6 months btw).