Then the commercial upstreams will have to provide patches in time in order to still be able to sell their products downstream-wards. For the open source upstr

Then the commercial upstreams will have to provide patches in time in order to still be able to sell their products downstream-wards. For the open source upstreams... I've heard they accept patches. If not, the source is open, the downstream vendors can fix that. They can even put together a pool, pay into it together, and use the pooled money to develop (and hopefully upstream) a patch...