The Secunia OSI detects my software as secure, but I know that there is a more recent version of the software. Does this mean that I am really secure?
Software can be detected by the Secunia OSI as secure, even if the vendor has released a more recent version. This is because vendors release software updates not just to patch vulnerabilities, but also to fix software bugs or introduce software enhancements. These fixes and enhancements may be non-security related (for example, adding new functionality or features). Therefore, prior versions of software can be secure even if they are not the most recent ones, as long as no known vulnerabilities are reported in them. In these cases, Secunia recommends that you read the vendor release notes to determine if you prefer to install the update or not.
