Am 10.12.2015 um 16:16 schrieb Noam Bernstein noam.bernstein@nrl.navy.mil:
I guess this is really a RedHat, not CentOS question, but I’m hoping that someone here will be familiar enough with the upstream policy to have some useful information.
How does RedHat decide which versions to release patches for, e.g. https://access.redhat.com/security/cve/CVE-2015-7613 https://access.redhat.com/security/cve/CVE-2015-7613 which has only a RH7 erratum, not 6? And are they likely to eventually release a fix for this type of issue for RH6?
Generally defined by the production phases: https://access.redhat.com/support/policy/updates/errata/
It explains not all but at least the big picture ...
-- LF