News for hackers. Stuff that matters.

A comment on EU to vote regulation that has a considerable potential to hurt OSS. Parent comment

Re:EU to vote regulation that has a considerable potential t... by smarx007 on Saturday July 15, 2023 @03:58PM (#36740408)
Now, to some controversial things: do I think it's good if RedHat is legally forced by CRA to close down CentOS Stream if they decide not to deliver all security fixes they apply to RHEL? Yes, I do. This legislation will kill the practice of funding OSS projects by providing enterprise versions where many CVE fixes are only available in the enterprise versions. To that, I say: good riddance. The last thing we need is OSS software that is regularly released and is intentionally missing important security fixes.
[ Parent | on HN ]
Re:EU to vote regulation that has a considerable potential t... by bonzini on Saturday July 15, 2023 @04:21PM (#36740592)
CVE fixes should not be available in RHEL only. If they are it's a bug. Of course RHEL might fix it with a backport whereas CentOS Stream might fix it with a new upstream version, but the fix should be there.
[ Parent | on HN ]
Re:EU to vote regulation that has a considerable potential t... by smarx007 on Saturday July 15, 2023 @04:24PM (#36740614)
Yes, sorry, I didn't make it clear that I was speaking of a purely hypothetical speculation that if RH ever decided to do this yet keep releasing CentOS Stream or Fedora, it would not be legal under CRA.
[ Parent | on HN ]