alt Hacker NewsIt would be best if distros kept tap on kernel changes and update as soon as possible when they see a security issue fixed.
Sending emails to some big distros would still result with e.g. Gentoo not getting that info because they are not a big distro.
Replies
gpvos • today at 8:25 AM
The kernel maintainers don't flag "security fixes" as special, and they have a well-thought-out reason for that, see many other comments in this thread.
➕ show 1 reply
The problem is that the kernel devs (correctly imo) consider all bugfixes security fixes. So the distros need to decide for themselves which ones are important enough to warrant an update. Apparently this one had a quite unclear commit message, so it importance was missed.
Not ideal, but also: shit happens? It's always a balancing act choosing the lesser of multiple evils and most of the time it seems to work ok-ish, which is probably the best we can hope for ;-P