Question about unsupported releases

Good afternoon,

When a release becomes a non supported one, at least known issues or bugs are found or can be known in some manner?.

For instance for the 8.1 ESR?. It’s just for being able to prioritize old unsupported ESR upgrades and so…

At least the most serious security vulnerabilities can be read anywhere?.

Does the community or the own company, at least announce that a serious bug was found or perhaps could even not be broadcasted for as said… don’t know prioritizing or similar?.

Just as curiosity,
Best regards,

Hello @egoitzr ! These links should answer your questions. Please LMK if I can amplify any points.

https://docs.mattermost.com/about/release-policy.html

1 Like

Hi!

Well the… only aspect I would like to know if a unsupported release even when non correction would be issued for at least the issues are still appearing as affected versions.

I say because that would be nice to know in order to know if you are affected by some serious security issue and for upgrading with urgency…

Or unsupported means that any kind of issue could be suffered while not noticing it could happen…

I know upgrade is required… just… that would be fine the fact of knowing if in case of serious problems you to be affected or… even as said… when no correction would be applied…

That would be nice really…

Cheers,

Sorry, I’m not really parsing what you’re saying.

I think you’re asking if there are issues that would be resolved in older versions of Mattermost, and the answer is almost certainly (and what you should count on) to be a hard no.

Whatever version you’re on, so long as it’s supported, there will be occasional minor releases, like 9.11.1, 9.11.2, 9.11.3, etc. It is highly recommended to watch for and apply those as soon as you can.

Hi John!

Well more than issues… I was just trying to focus only in security issues…

Really said, I was just wondering if in the security issues web site, that recently (months ago) become unsupported versions would appear as affected at least… just that…

I assume may be or may be not… isn’t it?

Cheers!

There’s a well-supported assumption that an EOL release is insecure, simply because it’s no longer under support. There might be a CVE pointing out that all versions before x.y.z are vulnerable to a particular vulnerability, but nobody is ever going to try to maintain that for any product, simply because everyone already has a fix… upgrade! If you’re running unsupported software, you’re gonna get got.

I see John…

As said… was not more than the fact of stay informed about that issues mainly but… nothing else…

Release cycles are moving faster and faster in some kind of software and that causes software versions being end of support more frequently (in different kind of software… not just Mattermost) so… a help like that would always I assume be welcome…

Cheers!