No mention of patching bugs in older releases?

[BugTraq] "Seems to me there's something really bad about software vendors. First of all, if author of program finds bug in it - even when this bug seems to be nasty - very often, he'll silently fix it, even without mentioning it in CHANGES (blessed those who put there text like 'some security fixes', at least there's ANY evidence of changes) nor anywhere else..."