Sure, they aren't backporting patches wholesale. But the patches that did get backported, if any, needs much more scrutiny given the situation. The thing about

Sure, they aren't backporting patches wholesale. But the patches that did get backported, if any, needs much more scrutiny given the situation. The thing about enterprise Linux distros is that they have a long support period. Bug fixes and security patches pile up. Fortunately though, xz doesn't seem to have a lot of backported patches. https://git.centos.org/rpms/xz/blob/c8s/f/SPECS/xz.spec https://git.centos.org/rpms/xz/blob/c8s/f/SPECS/xz.spec https://git.centos.org/rpms/xz/blob/c7/f/SPECS/xz.spec https://git.centos.org/rpms/xz/blob/c7/f/SPECS/xz.spec But take glibc for example. The amount of patches makes my head spin. https://git.centos.org/rpms/glibc/blob/c8s/f/SPECS/glibc.spec https://git.centos.org/rpms/glibc/blob/c8s/f/SPECS/glibc.spe...