Photo : AlmaLinux Day, held on March 18, 2024 in Rust, Germany. Does that mean more Rust in the Linux kernel ? :-)
If anyone’s curious, here’s the RHBZ ticket listing the products RH has patched this in: https://bugzilla.redhat.com/show_bug.cgi?id=2262126
That looks quite weird… RHEL 9.2 was patched in February. RHEL 7 and RHEL 8 have now been patched too, but RHEL 9 (9.3) is still vulnerable?
I think that’s the issue here, but that might just be poor documentation
The reason this is a first is because AlmaLinux recently decided to stop being a bug for bug clone of RHEL. Good for them. As this shows, they are now actually free to add value.
Rocky Linux cannot ship this patch unless RHEL does. Rocky cannot contribute anything by definition.
Well Rocky can contribute, but they’d have to send their patch to CentOS stream and hope it gets merged, then wait for Red Hat to implement the changes. So it’s more roundabout and ultimately is dependent on Red Hat