Confused about security fixes as reported at releases.discourse.org

For example, I’m on 2026.4.2 which is reported as fixing 25 security bugs compared to 2046.4

As 2026.4.2 is very recent, I’d expect it to have backports of most or all security fixes found in 2025.6 which was released at about the same time.

But no, again I see 25 security bugs fixed. I rather suspect they are the same ones.

Indeed, 2026.6 is reported as fixing - guess what - 25 security bugs compared to 2026.4.2

Is it perhaps the case that point releases are not being accurately reported?

I expect it to be true that being on 2026.4.2 is about as safe as being on 2026.6.0 and if so, to see that in the release comparison.

1 Like