If a vulnerability of the common not individualized ancestor software is found, how quickly do people patch their individual versions of the software?