So the SP tags are not created in the open-source repositories as a rule? (and of course neither are binaries published in maven)?
Are you implying that RH is not releasing "SP" fixes in 2.0.X as open-source in the normal repos?
If that is the case, I'd like to understand fully what is the policy for releasing bug-fixes, security fixes and such. Is there any document that explains such policy? I have built stuff that right now depends on 2.0.X, as many others I guess, based in (wrong?) assumptions about the open-ness of this project.