A fuzzy issue of responsible disclosure

>Yes, the solution is to shame the non-updater vendors.

Everyone who had a hand in the libav mutiny is culpable for half a decade of lost security here, though they'll never be held to account for it.