As the automotive industry enters into a massive digital revolution, which undeniably relies heavily on open source software, there has to be push towards frequent and sustained software updates. Whether it is a $50 speaker that sits on a desk or a $50,000 car that takes people to work, school and places beyond, consumers expect its software and their data to remain safe and secure. A large number of Linux based devices available today have pushed aside 'planned obsolescence' with 'security obsolescence'. Most phones stop getting updates after 3-5 years, after which time they become security liabilities. The automotive industry will need to push this time frame to 10-15 years, which is unique in the embedded Linux world. In this talk Mark will discuss the diversity of approaches to maintenance used by open source software projects. He will discuss how Linux operating system vendors (OSVs) and product vendors attempt to work withing the constraints of these approaches to offer safe and secure products over extended periods. He will also discuss how product vendors and consumers can sustain a desire for producing and consuming updates, even when they aren't accompanied with new features.