3 ms·
That was my take on it. But CentOS Stream didn't get a fix in time for last major CVE before RHEL/Oracle or ubuntu/debian for that matter. That killed it for me
by attentive 3y ago
That was my take on it. But CentOS Stream didn't get a fix in time for last major CVE before RHEL/Oracle or ubuntu/debian for that matter. That killed it for me.
- Yasuraka 3y agoAlmaLinux mentioned this in their 2023 revue >[After the split, we] have been able to ship critical security and bug fixes sooner than any other enterprise linux distro. [...] In some cases, any distribution that is still relying on RHEL as their upstream is still waiting for these patches to be released. https://almalinux.org/blog/2023-12-14-2023-highlights/ https://almalinux.org/blog/2023-12-14-2023-highlights/ Ironically, faster fixes were one of the reported reasons for moving CentOS upstream, turns out that was only for metabook. Alma is quickly becoming the new self-hosting distro for me and I feel by now they're better than before
- michel-slm 3y agoStream gets faster fixes in general, but yeah for embargoed security fixes it goes the other way around Even if you are Meta. The only trick we use is something anyone can do - hotfix it in Hyperscale, or download the Stream fix as soon as a signed build is available without waiting for it to be fully released