> older distros don't have much of a hope in hell of getting all reported CVE fixes back-ported Older distros have always had a ton of privilege escalation bug

> older distros don't have much of a hope in hell of getting all reported CVE fixes back-ported Older distros have always had a ton of privilege escalation bugs and I don’t think that’s ever gonna change. If you can’t keep everything updated, your machines have to be single-tenant.