Re: [cip-dev] [ANNOUNCE] Release v4.19.325-cip135

On 05.08.26 10:46, Pavel Machek wrote:
> Hi!
> 
>>
>> I understand that the CIP project addresses vulnerabilities in the Linux 4.19.325 base kernel and releases updated versions such as 4.19.325-cipX, with the latest release currently being 4.19.325-cip135.
>>
>> Could you please let me know:
> 
> We don't really have answers to these questions. Due to low quality of
> recent CVE entries, we don't track them closely.
> 
>> How many CVEs relevant to the 4.19.325 kernel are still unresolved?
>> How many of these CVEs are expected to be addressed in future CIP releases?
>> Is there an estimated CIP release number (cipX) by which all relevant CVEs will have been addressed?
> 
> 

Still, you can have a look at
https://gitlab.com/cip-project/cip-kernel/cip-kernel-sec for those CVEs
that are mappable on 4.19.

In addition, intentionally unresolved ones would be documented in
KNOWN-BUGS (see 4.4-cip [1], not existing for 4.19-cip so far).

If you identify anything that is apparently missing but critical, we are
all ears - or even open to review backport proposals. Just keep in mind
that the official CIP kernel support scope is limited to the
member-defined kernel configuration set [2].

Jan

[1]
https://git.kernel.org/pub/scm/linux/kernel/git/cip/linux-cip.git/tree/KNOWN-BUGS?h=linux-4.4.y-cip
[2]
https://gitlab.com/cip-project/cip-kernel/cip-kernel-config/-/tree/master/4.19.y-cip?ref_type=heads

-- 
Siemens AG, Foundational Technologies
Linux Expert Center