/ Register

Get the most out of your Centmin Mod LEMP stack
Become a Member

Beta Branch update cmsec ZDI-CAN-33367 Rocky Linux fixed kernel baselines in 140.…

Discussion in 'Centmin Mod Github Commits' started by eva2000, Nov 6, 2026 at 6:04 PM.

Previous Thread Next Thread
Loading...
  1. Nov 6, 2026 at 6:04 PM #1
    eva2000

    eva2000 Administrator Staff Member

    60,296
    12,609
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,267
    Local Time:
    6:42 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    update cmsec ZDI-CAN-33367 Rocky Linux fixed kernel baselines in 140.00beta01

    Rocky Linux 8/9/10 BaseOS kernels now carry the ZDI-CAN-33367 skb_zerocopy
    fix, so a vulnerable Rocky host is told to run a normal dnf upgrade instead
    of being told that no fixed kernel is known.

    Changes:
    - add Rocky Linux baselines 4.18.0-553.182.1.el8_10, 5.14.0-687.64.1.el9_8
    and 6.12.0-211.72.1.el10_2, used only when the kernel changelog cannot be read
    - keep Rocky CIQ (_ciq) kernels changelog-only
    - bump BASELINE_VERIFIED_DATE to 2026-11-06 and update header comments

    Continue reading...

    140.00beta01 branch
     
Previous Thread Next Thread
Loading...

.