Apr 16, 2020 18:02:33 Demi M. Obenour <demioben...@gmail.com>:

>
> Finally, some packages should have all updates considered as security 
> updates. This includes anything based on a web browser (Firefox, Thunderbird, 
> SeaMonkey, Chromium, webkit2gtk, etc), as well the Linux kernel itself. 
> Virtually every update of these packages fixes security vulnerabilities, so 
> updates to them should be considered security updates and treated as such.

For kernel updates this is probably not a good idea. Given that updates 
potentially introduce regressions, being able to distinguish updates with known 
CVEs that we do need to roll out immediately, versus other updates we can do 
more compatibility testing on, is critical.

Cheers,


-- 
-- 
Michel Alexandre Salim
profile: https://keybase.io/michel_slm
GPG key: 96A7 A6ED FB4D 2113 4056 3257 CAF9 AD10 ACB1 BEF2

_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org

Reply via email to