Dear community,
I would like to ask a following question:
- How are CVEs handled in CentOS Stream? The answer in faq page (https://centos.org/distro-faq https://centos.org/distro-faq) states that security issues will be updated in CentOS Stream after they are solved in the current RHEL release. However, CentOS Steam 8 solved CVE-2020-15437 (kernel) while RHEL 8 has not (as of February 17,2021). Does the order of security updates between RHEL and CentOS Stream depend on the situation?
Best regards, --- Naoto Kobayashi