4 ms·
It seems that if you do that, you will not get any updates, including security updates?
by lutorm 6y ago
It seems that if you do that, you will not get any updates, including security updates?
- StillBored 6y agoYah, it sounds that way. Rolling forward to the head is required to get the most recent security updates. Which isn't that far away from how centos works today. With rhel you get security updates for the point releases (8.1,8.2,etc) for a while after the new point release comes out. With centos, the day that the newer version drops, they don't tend to roll security updates into the older ones.
- teilo 6y agoThese are not frozen releases. They are parallel streams that each get their own CVE updates from the corresponding RHEL release.
- teilo 6y agoNot true. Q4: How will CVEs be handled in CentOS Stream? A: Security issues will be updated in CentOS Stream after they are solved in the current RHEL release. Obviously, embargoed security releases can not be publicly released until after the embargo is lifted. While there will not be any SLA for timing, Red Hat Engineers will be building and testing other packages against these releases. If they do not roll in the updates, the other software they build could be impacted and therefore need to be redone. There is therefore a vested interest for them to get these updates in so as not to impact their other builds and there should be no issues getting security updates.