Canonical interview question

How would you backport a security patch