• baseless_discourse@mander.xyz
    link
    fedilink
    arrow-up
    1
    ·
    edit-2
    7 months ago

    Most softwares do not include detailed security fixes in the change log for people to check; and many of these security fixes are in dependencies, so it is unlikely to be documented by the software available to the end user.

    So most of the time, the safest “oldest safe” version is just the latest version.

    • acockworkorange@mander.xyz
      link
      fedilink
      arrow-up
      1
      ·
      edit-2
      7 months ago

      So only protects like Debian do security backports?

      Edit: why the downvote? Is this not something upstream developers do? Security fixes on older releases?

      • Kelly@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        7 months ago

        Backports for supported versions sure,.

        That’s why there is an incentive to limit support to latest and maybe one previous release, it saves on the backporting burden.