Old version support

[Mike Meyer]

In <Pine.LNX.4.33.0304081530380.15997-100000 at gnomo.fe.up.pt>, Miguel Gonçalves <miguelg at fe.up.pt> typed:
> On Tue, 8 Apr 2003, Mike Meyer wrote:
> > In <Pine.LNX.4.33.0304081414220.13566-100000 at gnomo.fe.up.pt>, Miguel Gonçalves <miguelg at fe.up.pt> typed:
> > > How is it possible to cope with this without installing a current
> > > version?
> > The only way to ensure support for an open source product is to
> > provide it yourself - either by doing the work yourself, or hiring
> > someone to do it. If you're planning on hiring someone, you might
> But how do I know that my system is vulnerable if I don't have an
> exploit for example?  This would be like fixing I problem that I
> might not have.

It's certainly possible that a patch for a later version may fix a bug
that was introduced in a later version. You just have to live with
that, and check the patch against your version when it comes out. You
can take heart from the fact that code auditing is improving, so this
situation is getting less likely all the time.

	<mike
-- 
Mike Meyer <mwm at mired.org>		http://www.mired.org/consulting.html
Independent Network/Unix/Perforce consultant, email for more information.