Re: [MAINTAINERS SUMMIT] Handling of embargoed security issues -- security@korg vs. linux-distros@

Jiri Kosina
2023-08-16T17:22:17Z

On Wed, 16 Aug 2023, Greg KH wrote:

> > > Why are they not just doing what the huge majority of Linux users doing
> > > and taking the "feed of known issues that resolve problems before they
> > > are public knowledge" that we provide today for free to them? Because
> > > they somehow think that knowing a specific single bugfix is more special
> > > than all of those other bugfixes, which honestly, is just loony.
> >
> > If you'd like me to turn this proposal into "What can we do to make sure
> > that most major distros are eventually basing their kernels on -stable"
> > discussion, I'd be happy to do that, but I believe this has been discussed
> > quite extensively already.
>
> It has, and note that no one in the room would be in a real position to
> solve the problem (Project Managers and VPs are not usually invited to
> the kernel summit.)

Not sure about other distros, but at least at SUSE, this decision powers
are held by the kernel developers / maintainers of the branches in
question.

Thanks,

--
Jiri Kosina
SUSE Labs