Backporting Explained

Backporting is the action of taking parts from a newer version of a software system or software component and porting them to an older version of the same software. It forms part of the maintenance step in a software development process, and it is commonly used for fixing security issues in older versions of the software and also for providing new features to older versions.

Overview

The simplest and probably most common situation of backporting is a fixed security hole in a newer version of a piece of software. Consider this simplified example:

• Software v2.0 had a security vulnerability that is fixed by changing the text 'is_unsecured' to 'is_secured'.
• The same security hole exists in Software v1.0, from which the codebase for the newer version is derived, but there the text may read 'is_notsecure'.

By taking the modification that fixes Software v2.0 and changing it so that it applies to Software v1.0, one has effectively backported the fix.^[1]

In real-life situations, the modifications that a single aspect of the software has undergone may be simple (only a few lines of code have changed) up to heavy and massive (many modifications spread across multiple files of the code). In the latter case, backporting may become tedious and inefficient and should only be undertaken if the older version of the software is really needed in favour of the newer (if, for example, the newer version still suffers stability problems that prevent its use in mission-critical situations).^[2]

Procedures

The process of backporting can be roughly divided into these steps:

1. identification of the problem in the older version of the software that needs to be fixed by a backport
2. finding out which (usually recent) modification of the code fixed the problem
3. adapting the modification to the old code situation (the proper backporting)
4. one or several levels of quality control testing whether the backported version maintains previous functionality as well as if it properly implements the new functionality.

Usually, multiple such modifications are bundled in a patch set.

Backports can be provided by the core developer group of the software. Since backporting needs access to the source code of a piece of software, this is the only way that backporting is done for closed source software the backports will usually be incorporated in binary upgrades along the old version line of the software. With open-source software, backports are sometimes created by software distributors and later sent upstream (that is, submitted to the core developers of the afflicted software).

Examples

• Many features of Windows Vista were backported to Windows XP when Service Pack 3 was released for Windows XP, thereby facilitating compatibility of applications (mostly games) originally with Vista as a minimum requirement to run on XP SP3 as a minimum requirement instead.^[3]
• The Debian Project since September 2010^[4] has provided an official backporting service for some Debian Linux software packages, and Ubuntu Linux also supports backports.^[5]
• In 2024, a YouTuber named MattKC backported .NET Framework versions 2.0 and 3.5 to Windows 95, which did not officially support the framework.^{[6] [7]}

See also

• Backward compatibility
• Retrofitting
• Java backporting tools

Notes and References

1. Web site: Backporting Security Fixes . . 2020-05-11 . 2020-05-12 . https://web.archive.org/web/20200512171443/https://access.redhat.com/security/updates/backporting/ . live .
2. Web site: Staying close to upstream projects . Rahul Sundaram . 2016-01-14 . . 2020-05-11 . 2011-08-05 . https://web.archive.org/web/20110805082914/http://fedoraproject.org/wiki/Staying_close_to_upstream_projects . live .
3. Web site: Microsoft backports Vista features for new Windows XP SP3 beta . 2007-10-09 . Donald Melanson . . 2020-05-11 . 2016-03-04 . https://web.archive.org/web/20160304033042/http://www.engadget.com/2007/10/09/microsoft-backports-vista-features-for-new-windows-xp-sp3-beta/ . live .
4. Web site: Backports service becoming official. 2010-09-05. Debian Project. 2020-05-11. 2011-09-03. https://web.archive.org/web/20110903172855/http://www.debian.org/News/2010/20100905. live.
5. Web site: UbuntuBackports . 2015-11-29 . . 2020-05-11 . 2019-05-03 . https://web.archive.org/web/20190503051547/https://help.ubuntu.com/community/UbuntuBackports . live .
6. Web site: Harper . Christopher . 2024-04-14 . Thousands of apps ported back to Windows 95 twenty-eight years later — .NET Framework port enables backward compatibility for modern software . 2024-07-01 . . en . 2024-05-31 . https://web.archive.org/web/20240531170725/https://www.tomshardware.com/software/operating-systems/thousands-of-apps-ported-back-to-windows-95-twenty-eight-years-later-net-framework-port-enables-backward-compatibility-for-modern-software . live .
7. Web site: Posch . Maya . 2024-04-14 . Porting Modern Windows Applications To Windows 95 . 2024-07-01 . . en-US . 2024-07-01 . https://web.archive.org/web/20240701121659/https://hackaday.com/2024/04/14/porting-modern-windows-applications-to-windows-95/ . live .