Security Fix Delays

I should note, further, that in my employer's typical use of CentOS, delays in delivery of security updates rarely affect them. That is the nature of third-party development: it just has to work well enough to compile against. It doesn't have to be fast or secure, or to run on modern hardware. The only iron law is that it needs to be link-compatible with the (mutual) customers' RHEL installations.