In reply to concernedAssHat.

Hi. “Nexcess Lady” here.

It’s really important to understand how enterprise-level hosting works. Hosts charged with delivering enterprise-level environments frequently run older versions of Linux intentionally because they are stable and predictable. But that means that they often have older versions of packages like cURL on them.

However, the one of the benefits of Enterprise Linux distros is, among other things, active support for and backported patches to those packages. Just because a package version is no longer being patched by its own maintainers doesn’t mean it isn’t being patched at all. Just some context for folks who aren’t aware of how Enterprise Linux works. It’s a lot easier (and better for customers) to mitigate things like older packages needing patches than it is to mitigate the instability inherent to the latest-and-greatest.

While my colleagues at other hosts aren’t calling attention to themselves in this situation, a great many of them are in exactly the same position, and intentionally so.