Dear community,
I would like to ask a following question:
- How are CVEs handled in CentOS Stream? The answer in faq
page (https://centos.org/distro-faq)
states that security
issues will be updated in CentOS Stream after they are solved
in the current RHEL release. However, CentOS Steam 8 solved
CVE-2020-15437 (kernel) while RHEL 8 has not (as of February
17,2021).
Does the order of security updates between RHEL and CentOS
Stream
depend on the situation?
Best regards,
---
Naoto Kobayashi