3 ms·
Is it known if they submit the patches upstream? If not, that seems borderline unethical to do so with security patches.
by whoisthemachine 4y ago
Is it known if they submit the patches upstream? If not, that seems borderline unethical to do so with security patches.
- mardifoufs 4y agoThat's a good question! I have no clue, but I know that they also patch unsupported packages that probably aren't getting updated anymore. I'm not sure how they assess which packages are vulnerable but I guess some of them already have a fix upstream that didn't go through the (debian or ubuntu) repo maintainers yet.
- mhio 4y agoIf not, maybe someone can build a "centos-esm" from the sources? At least for the GPL packages where they have to be provided.