"Unfortunately in the bank where i work it is not easy to change the version, it requires lots of resources to retest." says reporter who uses a ten years old #curl version with a suspected bug... The problem is not open source.
@dec_hl@bagder and if you did release a bugfix for an ancient version, they'd have to do all their testing against the special bugfix release, rather than the latest supportable version anyway.
@draeath@zymurgic@dec_hl@bagder I’ve seen software where manually building specific modules with patches is seen as preferable to just getting a new build… despite how much that runs the risk of incompatibilities between the code, and porting errors