Conversation

Notices

1. Embed this notice
   Thorsten Leemhuis (acct. 1/4) (kernellogger@fosstodon.org)'s status on Sunday, 25-Feb-2024 22:42:38 JST Thorsten Leemhuis (acct. 1/4)

   Did a quick *rough* check:

   * 65 #Linux #kernel CVE announcements from Greg so far

   * 55 of those refer to a mainline commit

   * 10 of those were marked for backporting to stable/longterm

   And that's why Greg backports a lot of #LinuxKernel mainline commits to stable/longterm that are *not* tagged for backporting -- and why "only backport changes mainline developers[1] tagged for backporting" is a bad idea.

   [1] reminder, such tagging is optional, as participation in stable/longterm is optional

   • Haelwenn /элвэн/ :triskell: likes this.
   • Embed this notice
     Greg K-H (gregkh@social.kernel.org)'s status on Sunday, 25-Feb-2024 22:45:19 JST Greg K-H

     in reply to

     @kernellogger Your data is going to be a bit skewed here, we have ONLY processed the v6.7..v6.7.1 and most of the v6.7.1..v6.7.2 commits so far for CVE-related stuff, which by far the majority have only Fixes: tags due to my travel schedule during those releases (i.e. I didn’t have the cycles to catch up with the cc: stable@ tagged commits. I bet the numbers will level out over time as we catch up with the rest of the commits in the v6.7.Y releases.

     And it’s good to see people paying attention, thank you!

     Haelwenn /элвэн/ :triskell: likes this.