Please provide patch level updates for security vulnerabilities to ensure users safety about universalmediaserver HOT 3 CLOSED

@bluepuma77 thank you for the suggestion. I had a think about it. We are open source and users are always able to build the latest version for themselves, and we provide detailed instructions about how to do that on major operating systems. The downloads are provided for convenience.

You do make a good point, but I think users who are especially motivated by anything in the changelog can either build it for themselves for free, or pay $1 for access to the compiled binaries

from universalmediaserver.

@SubJunk Most users will just use the free version, and you knowingly distribute that version with existing security vulnerabilities. Not cool. I think we should all try to do our part to make the Internet a saver place.

from universalmediaserver.

If there was a critical priority vulnerability fix I might do a patch release like you said. In this case it wasn’t. It was a reference to security bumps in the bundled Java runtime, which again any user is free to bump for themselves without waiting for a download.

I do like the approach you have suggested and you have convinced me to do that in the future for serious vulnerability patches.

from universalmediaserver.