Linux kernels AlmaLinux 8, 9, 10, the current Fedora, Ubuntu 24.04 and 26.04 LTS: vendors' repositories and advisories
changes: 1 — in 24 h: Ubuntu 24.04 LTS · HWE (1)
yellow bar — appeared in the last 24 hours · red — a red rating
Critical · urgent · major — the vendor's top rating, or no rating while CVEs are listed: red pill and barImportant · high · medium — the vendor's second ratingModerate · medium · low — the vendor's other ratingsthe rating is the vendor's: AlmaLinux Critical / Important / Moderate, Low; Fedora and EPEL urgent / high / medium, low; Ubuntu (USN OVAL) Critical / High / Medium, Low; nginx.org major / medium / low; modules — CVSS from the CVE record critical / high / medium, low; PowerDNS Critical, High / Medium / Lowskipped testing — the Fedora update went straight to stable, without testing (as Bodhi shows)Ubuntu pockets: proposed — published for testing, updates — released, security — released as a security fix
304AlmaLinux 8 · BaseOS repository · checked · changed method conditional GET repomd.xml → on change: the Packages/ listing (when the kernel file appeared); updateinfo.xml.gz (advisory, vendor rating, CVEs; sha256 checked against repomd.xml) — when a new kernel appeared, a kernel of the last 30 days waits for its advisory, or once a day · rule every 5 min; the official repository is down — AlmaLinux mirrors from the mirrorlist (https only, revision not older than already seen): kernels from the advisories, time from the file's Last-Modified
304AlmaLinux 9 · BaseOS repository · checked · changed method conditional GET repomd.xml → on change: the Packages/ listing (when the kernel file appeared); updateinfo.xml.gz (advisory, vendor rating, CVEs; sha256 checked against repomd.xml) — when a new kernel appeared, a kernel of the last 30 days waits for its advisory, or once a day · rule every 5 min; the official repository is down — AlmaLinux mirrors from the mirrorlist (https only, revision not older than already seen): kernels from the advisories, time from the file's Last-Modified
304AlmaLinux 10 · BaseOS repository · checked · changed method conditional GET repomd.xml → on change: the Packages/ listing (when the kernel file appeared); updateinfo.xml.gz (advisory, vendor rating, CVEs; sha256 checked against repomd.xml) — when a new kernel appeared, a kernel of the last 30 days waits for its advisory, or once a day · rule every 5 min; the official repository is down — AlmaLinux mirrors from the mirrorlist (https only, revision not older than already seen): kernels from the advisories, time from the file's Last-Modified
unchangedFedora · current release (Bodhi) · checked · changed method GET → JSON parsing; current is the newest Fedora release in state current · rule every 6 h
okFedora · kernel updates (Bodhi) · checked · changed method Bodhi API: updates of package kernel for the current release — when it entered testing and stable, type, rating, CVEs from the linked bugs · rule every 15 min; Bodhi is down — the Packages/k/ listing of the updates and updates-testing repositories on Fedora mirrors (mirrorlist, https only): a new kernel shows up, ratings and CVEs come from Bodhi later
okUbuntu 24.04 LTS · GA · Launchpad · checked · changed method Launchpad API (getPublishedSources): when the kernel source was published in proposed, updates and security, its status · rule every 15 min; the first time — a year of history; Launchpad is down — the archive's Release and Sources.xz (archive.ubuntu.com, security.ubuntu.com; sha256 from Release): a new kernel shows up with the Release time
okUbuntu · security notices (USN) · checked · changed method the notices RSS (latest 10) → JSON of new kernel notices → USN number, date, CVE count for the source version · rule every 30 min; the first time — 2 pages of notices.json per release; the rating comes from the USN OVAL
304Ubuntu noble · notice ratings (USN OVAL) · checked · changed method conditional GET of the release's USN OVAL (bz2) → Ubuntu's rating of every notice (Critical, High, Medium, Low) · rule every 6 h; ~1.3 MB, only when changed; shared by kernels and nginx
okUbuntu 24.04 LTS · HWE · Launchpad · checked · changed method Launchpad API (getPublishedSources): when the kernel source was published in proposed, updates and security, its status · rule every 15 min; the first time — a year of history; Launchpad is down — the archive's Release and Sources.xz (archive.ubuntu.com, security.ubuntu.com; sha256 from Release): a new kernel shows up with the Release time
okUbuntu · security notices (USN) · checked · changed method the notices RSS (latest 10) → JSON of new kernel notices → USN number, date, CVE count for the source version · rule every 30 min; the first time — 2 pages of notices.json per release; the rating comes from the USN OVAL
304Ubuntu noble · notice ratings (USN OVAL) · checked · changed method conditional GET of the release's USN OVAL (bz2) → Ubuntu's rating of every notice (Critical, High, Medium, Low) · rule every 6 h; ~1.3 MB, only when changed; shared by kernels and nginx
okUbuntu 26.04 LTS · Launchpad · checked · changed method Launchpad API (getPublishedSources): when the kernel source was published in proposed, updates and security, its status · rule every 15 min; the first time — a year of history; Launchpad is down — the archive's Release and Sources.xz (archive.ubuntu.com, security.ubuntu.com; sha256 from Release): a new kernel shows up with the Release time
okUbuntu · security notices (USN) · checked · changed method the notices RSS (latest 10) → JSON of new kernel notices → USN number, date, CVE count for the source version · rule every 30 min; the first time — 2 pages of notices.json per release; the rating comes from the USN OVAL
304Ubuntu resolute · notice ratings (USN OVAL) · checked · changed method conditional GET of the release's USN OVAL (bz2) → Ubuntu's rating of every notice (Critical, High, Medium, Low) · rule every 6 h; ~1.3 MB, only when changed; shared by kernels and nginx
conditional GET repomd.xml → on change: the Packages/ listing (when the kernel file appeared); updateinfo.xml.gz (advisory, vendor rating, CVEs; sha256 checked against repomd.xml) — when a new kernel appeared, a kernel of the last 30 days waits for its advisory, or once a day
every 5 min; the official repository is down — AlmaLinux mirrors from the mirrorlist (https only, revision not older than already seen): kernels from the advisories, time from the file's Last-Modified
conditional GET repomd.xml → on change: the Packages/ listing (when the kernel file appeared); updateinfo.xml.gz (advisory, vendor rating, CVEs; sha256 checked against repomd.xml) — when a new kernel appeared, a kernel of the last 30 days waits for its advisory, or once a day
every 5 min; the official repository is down — AlmaLinux mirrors from the mirrorlist (https only, revision not older than already seen): kernels from the advisories, time from the file's Last-Modified
conditional GET repomd.xml → on change: the Packages/ listing (when the kernel file appeared); updateinfo.xml.gz (advisory, vendor rating, CVEs; sha256 checked against repomd.xml) — when a new kernel appeared, a kernel of the last 30 days waits for its advisory, or once a day
every 5 min; the official repository is down — AlmaLinux mirrors from the mirrorlist (https only, revision not older than already seen): kernels from the advisories, time from the file's Last-Modified
Bodhi API: updates of package kernel for the current release — when it entered testing and stable, type, rating, CVEs from the linked bugs
every 15 min; Bodhi is down — the Packages/k/ listing of the updates and updates-testing repositories on Fedora mirrors (mirrorlist, https only): a new kernel shows up, ratings and CVEs come from Bodhi later
Launchpad API (getPublishedSources): when the kernel source was published in proposed, updates and security, its status
every 15 min; the first time — a year of history; Launchpad is down — the archive's Release and Sources.xz (archive.ubuntu.com, security.ubuntu.com; sha256 from Release): a new kernel shows up with the Release time
Launchpad API (getPublishedSources): when the kernel source was published in proposed, updates and security, its status
every 15 min; the first time — a year of history; Launchpad is down — the archive's Release and Sources.xz (archive.ubuntu.com, security.ubuntu.com; sha256 from Release): a new kernel shows up with the Release time
Launchpad API (getPublishedSources): when the kernel source was published in proposed, updates and security, its status
every 15 min; the first time — a year of history; Launchpad is down — the archive's Release and Sources.xz (archive.ubuntu.com, security.ubuntu.com; sha256 from Release): a new kernel shows up with the Release time
vigil