Credit where credit due
Posted Feb 26, 2004 4:14 UTC (Thu) by ncm
Parent article: The trouble with backporting fixes
I believe it has always been OpenBSD's position that all bugs are security
holes until proven otherwise. It's no fun seeing proof.
Running newer versions is no panacea. New features are fertile ground
for un-reported and un-analyzed bugs, readily discovered by inspection.
It may be that critically-exposed software should be released in a form
in which new features can be ifdef'd out until after they have been
to post comments)