Re:Multiple 7-Zip Vulnerabilities Discovered
by TeMPOraL on Thursday May 12, 2016 @05:06PM
(#11686789)
Why would they need regular releases? This is not a web startup, it's an archive compression/decompression tool. It worked perfectly well 5 years ago.
Re:Multiple 7-Zip Vulnerabilities Discovered
by giancarlostoro on Thursday May 12, 2016 @06:55PM
(#11687439)
I was wondering the same. Unless it involves a security being ignored for a year or more, I don't see much of an issue with a lack of updates. I rather a developer takes their time to write their code vs. speed coding and publishing new bugs left and right.
I find it unlikely that there would be no memory leaks needing patching, no important compiler updates, and no API-compatible dependency updates that should've been applied to the stable release.
The Linux Kernel, Firefox, and lots of projects have some sort of Long Term Service branch where simple uncontroversial improvements are added.
Modern best practices for releasing open source software are important, and a project that doesn't seem aware of any of them makes me concerned about their attention to detail.
Re:Multiple 7-Zip Vulnerabilities Discovered
by poizan42 on Thursday May 12, 2016 @06:38PM
(#11687364)
The version they consider "stable" is rarely updated. That just means they have a very high standard for when it's considered stable.
If you look through the changelog you'll see that the largest gaps between any releases was from 9.25 alpha (2011-09-16) to 9.30 alpha (2012-10-26).
The code quality may be excellent, but it just seemed to me that they were not too well organized, logistically, compared to other projects.