Red Hat reports security issue in Linux Kernel which was fixed 17 months prior
1–10 of 78 posts
Re: Red Hat reports security issue in Linux Kernel which was fixed 17 months prior
#2[deleted]
Re: Red Hat reports security issue in Linux Kernel which was fixed 17 months prior
#3Why don't Red Hat et al use the LTS kernels?
Re: Red Hat reports security issue in Linux Kernel which was fixed 17 months prior
#4Why don't Red Hat et al use the LTS kernels?
Probably drivers.
Re: Red Hat reports security issue in Linux Kernel which was fixed 17 months prior
#5Re: Red Hat reports security issue in Linux Kernel which was fixed 17 months prior
#6Your headline's misleading. Red Hat knows it's long been fixed in the LTS kernels, but it still needs patching in the RHEL kernels. Generally speaking, current LTS kernels are not used in older Linux distros.
Re: Red Hat reports security issue in Linux Kernel which was fixed 17 months prior
#7Why don't Red Hat et al use the LTS kernels?
They feel like they know better and do not want all of the fixes that the LTS kernels provide for some crazy reason.
I suggest you contact them if you rely on a RHEL kernel to ask them why they do this, it's always seemed crazy.
Note, I'm the person who does the LTS kernel releases, maybe they just don't like me :)
Re: Red Hat reports security issue in Linux Kernel which was fixed 17 months prior
#8Why don't Red Hat et al use the LTS kernels?
Red Hat sometimes also backports new features, not just security fixes. In the first years of RHEL life cycle new features and certain upgrades are usually added to the point releases. This is actually nicer than being locked into same feature kernel for 10 years...for those that can't afford the changes, you have the Extended Support for each point release which then gets only the security fixes.
Re: Red Hat reports security issue in Linux Kernel which was fixed 17 months prior
#9I really hate the fact that RHEL updates kernels so slowly. This becomes very painful when your product cannot take advantage of some advanced kernel features just because you have customers running RHEL :(.
Re: Red Hat reports security issue in Linux Kernel which was fixed 17 months prior
#10Can someone in the kernel dev space give a longer explanation for this?
This looks to me like Red Hat assigning a CVE to something patched a long time ago. Is this just record keeping to label security issues with CVEs or has Red Hat left this unpatched for 17 months? (Or something else?)