On Wed, Apr 10, 2024 at 08:08:07PM +0300, Adrian Bunk wrote: > > My point was that an opposite approach of doing only > "file upstream bugs and wait for upstream to fix the CVEs" > is unlikely to have a positive outcome in this case. > > Forwarding fixes upstream is of course desirable, > even when upstream is dead. > Ah, thanks for the clarification. Regards, -Roberto -- Roberto C. Sánchez