<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style type="text/css">.style1 {font-family: "Times New Roman";}</style></head><body>
<div class="moz-cite-prefix">On 31/01/2021 16:02, Leon Fauster via
elrepo wrote:<br>
</div>
<blockquote type="cite" cite="mid:4756df83-90c9-7dbd-4a5a-9210c0d7c6d9@gmail.com">
Am 31.01.21 um 15:14 schrieb lejeczek via elrepo:<br>
> <br>
> <br>
> On 31/01/2021 13:44, Trevor Hemsley wrote:<br>
>> On 31/01/2021 10:38, lejeczek via elrepo wrote:<br>
>> > Does anybody else get this and if yes then should it
go to<br>
>> > bugzilla?<br>
>><br>
>> ELRepo do not support Stream since it uses a different,
non-KABI stable,<br>
>> kernel series to RHEL. This is something that's come up
several times in<br>
>> the mailing list etc threads on what Red Hat are doing
with CentOS <br>
>> Linux 8.<br>
>><br>
>> Trevor<br>
>><br>
> And what is the actual problem? Surely it's not one of
technical nature.<br>
> Increasingly more of us will be ridding "Stream" as months go
by.<br>
> many thanks, L.<br>
<br>
As others pointed out - its a problem thats not resolved now.<br>
Following should not been seen as solution (the location can<br>
vanished in the future)<br>
<br>
JFI: old 240series-stream-kernel<br>
<br>
<a href="https://composes.centos.org/CentOS-Stream-8-20201203.n.0/compose/BaseOS/x86_64/os/Packages" moz-do-not-send="true">https://composes.centos.org/CentOS-Stream-8-20201203.n.0/compose/BaseOS/x86_64/os/Packages/</a><br>
</blockquote>
<br>
And thanks for amply demonstrating why this is not a useful solution
:-( <br>
<br>
The latest kernel there in the -240 series is the original 8.3 one,
<a class="moz-txt-link-freetext" href="https://composes.centos.org/CentOS-Stream-8-20201203.n.0/compose/BaseOS/x86_64/os/Packages/kernel-core-4.18.0-240.el8.x86_64.rpm">https://composes.centos.org/CentOS-Stream-8-20201203.n.0/compose/BaseOS/x86_64/os/Packages/kernel-core-4.18.0-240.el8.x86_64.rpm</a><br>
<br>
In CentOS Linux 8.3 there have been several newer kernels than the
-240.el8 one listed there. When I check the rpm changelog for the
latest (-240.10.1) it has the original -240 one listed starting on
line 91 so the list of CVEs you would be missing by reverting to
that -240.el8 kernel is<br>
<br>
<pre>[root@centos8 ~]# rpm -q --changelog kernel-core-4.18.0-240.10.1.el8_3 | head -90 | grep CVE
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1892665 1892666] {CVE-2020-25211}
- [netdrv] geneve: add transport ports in route lookup for geneve (Mark Gray) [1891818 1884481] {CVE-2020-25645}
- [char] random32: update the net random state on interrupt and activity (Donghai Qiao) [1888233 1867569] {CVE-2020-16166}
- [net] Bluetooth: fix kernel oops in store_pending_adv_report (Gopal Tiwari) [1888454 1888455] {CVE-2020-24490}
- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888257 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888806 1888807] {CVE-2020-12352}
</pre>
<br>
Trevor<br>
<br><br><p style="font-family: Verdana; font-size:10pt; color:#666666;"><b>Disclaimer</b></p><p style="font-family: Verdana; font-size:8pt; color:#666666;">The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful.<br><br>This email has been scanned for viruses and malware, and may have been automatically archived by <b>Mimecast Ltd</b>, an innovator in Software as a Service (SaaS) for business. Providing a <b>safer</b> and <b>more useful</b> place for your human generated data. Specializing in; Security, archiving and compliance. To find out more <a href="http://www.mimecast.com/products/" target="_blank">Click Here</a>.</p></body></html>