5 ms·
The point of LTS kernels is that they do get constant updates ie that security patches are backported. There is no world in which you can avoid updating frequen
by jupp0r 3y ago
The point of LTS kernels is that they do get constant updates ie that security patches are backported. There is no world
in which you can avoid updating frequently.
- usr1106 3y agoThere are many more updates than security updates coming to LTS kernels all the time. Kernel updates are more often than not even categorized in any way. Only for very prominent vulnerabilities the security impact is clear to a larger audience.
- worthless-trash 3y agoUpstream seems downright hostile to classifying patches as security.
- mr_toad 3y agoNearly any bug could be a security risk.
- worthless-trash 3y agoCould be yep, the delicate dance of writing in C.
- bman_kg 3y agoSo does it mean that linux is rolling out updates but these updates do not consider security? Just curious about this thing, I just started using linux and this topic is interesting for me
- elsjaako 3y agoIt means that there are bug fixesall the time, but most of the time no one sorts these into "security" and "non-security" categories. I remember a message (I can't find it back right now) where this is explained. Basically the thinking is that a lot of bugs can be used to break security, but sometimes it takes a lot of effort to figure out how to exploit a bug. So you have some choices: * Research every bug to find out the security implications, which is additional work on top of fixing the bug. * Mark only the bugs that have known security implications as security fixes, basically guaranteeing that you will miss some that you haven't researched. * Consider all bugs as potentially having security implications. This is basically what they do now.