"Unfortunately in the bank where i work it is not easy to change the version, it requires lots of resources to retest." says reporter who uses a ten years old #curl version with a suspected bug... The problem is not open source.
@bagder did they demand you fix the old version retrospectively with an insane deadline and dire consequences? 😬
@dec_hl @bagder and if you did release a bugfix for an ancient version, they'd have to do all their testing against the special bugfix release, rather than the latest supportable version anyway.
@zymurgic @dec_hl @bagder it's possible they have an abbreviated process for testing/deploying a patch to an approved version.
@draeath @zymurgic @dec_hl @bagder I’ve seen software where manually building specific modules with patches is seen as preferable to just getting a new build… despite how much that runs the risk of incompatibilities between the code, and porting errors