Not necessarily -- some organizations would patch it themselves in a private branch just to maintain an edge, assuming they have the expertise in-house. I've done this before with GPLed libraries. That's assuming you can even track down the problem -- Vendetta Online couldn't pin it down well enough to submit a coherent bug report (in fairness, SBCL is a monstrosity; just as a comparison, how many Rails developers could track down CRuby bugs?).

I wouldn't call Erlang and Python Blubs.