I've had some interest from merchants on M1 EE express interest in keeping M1 EE secure as well. As M1's core is the same across CE and EE I believe we'll be able to find a way for them to update their Mage and Zend core without issue. We probably just want to do additional testing.
For keeping the additional Enterprise Core modules secure we might have to open the bug bounty program to M1 EE as well. I believe there will be fairly limited M1 EE merchants so in terms of funding those we might request some sort of donation from those merchants.
We'll need to release any EE updates as patch files as we won't be able to legally release the full source code of them. We would only release patches for the final official version of M1.14.x EE to minimize the number of patches we need to release/test.
I believe Magento has only given EE merchants an additional year past the EOL for their license so this would be shorter than the M1 CE updates.
I've had some interest from merchants on M1 EE express interest in keeping M1 EE secure as well. As M1's core is the same across CE and EE I believe we'll be able to find a way for them to update their Mage and Zend core without issue. We probably just want to do additional testing.
For keeping the additional Enterprise Core modules secure we might have to open the bug bounty program to M1 EE as well. I believe there will be fairly limited M1 EE merchants so in terms of funding those we might request some sort of donation from those merchants.
We'll need to release any EE updates as patch files as we won't be able to legally release the full source code of them. We would only release patches for the final official version of M1.14.x EE to minimize the number of patches we need to release/test.
I believe Magento has only given EE merchants an additional year past the EOL for their license so this would be shorter than the M1 CE updates.