Comment by josephcsible

I don't think Red Hat has ever said anything like "A known-vulnerable version of this package is free. We did the work of making a security patch for it, but to get that, you have to pay." for any of their releases prior to EOL.