CVEs

Posted Dec 5, 2024 17:23 UTC (Thu) by alspnost (guest, #2763)
Parent article: Stable kernels 6.12.2, 6.11.11, and 4.19.325

If all the thousands and thousands of patches that have continued to be applied since the original 4.19 release are not fixing CVEs, what are they fixing? So the CVE list is nearly a thousand for this kernel - is it zero for the latest LTS (i.e., now 6.12.2)? Presumably not?

CVEs

Posted Dec 5, 2024 19:17 UTC (Thu) by ballombe (subscriber, #9523) [Link]

Does the tool account for vulnerabilities that were introduced after 4.19 was released ?

CVEs

Posted Dec 6, 2024 2:36 UTC (Fri) by kazer (subscriber, #134462) [Link] (1 responses)

Other CVEs and issues that were not given a CVE tracking in the first place.

CVEs

Posted Dec 6, 2024 2:51 UTC (Fri) by kazer (subscriber, #134462) [Link]

Let me clarify this by saying that developers fix and improve things all the time and later someone might figure out that it also fixed a thing that might have been a security issue as well. Greg gave an interesting talk about this recently.