CentOS 8 Security Advisories

[Animesh]

Hello Team,

We check the following CentOS advisory page for new CVE or security vulnerability information related to CentOS.
https://lists.centos.org/pipermail/centos-announce/

However, we have noticed that this page does not contain any information related to CentOS version 8. Since CentOS 8 has been out for a while now, we are interested in getting CentOS 8 security advisory bulletins.
https://wiki.centos.org/Manuals/Release ... ntOS8.1905

Could you please refer to the link where all CentOS 8 security advisories are released.

Thanks,

[jlehtone]

First a note: 1905 is already dead. Long live 2004! https://wiki.centos.org/action/show/Man ... ntOS8.2004

I have seen comments that the build&delivery system for CentOS 8 is substantially different from the previous releases and due to that those announcements are technically not possible.

CentOS aims to be 100% bug for bug compatible with RHEL. Therefore, Red Hat's CVEs for RHEL ought to be close to representative. (No, I don't know their whereabouts either.)

[Animesh]

Does that mean, we should follow RHEL 8 advisories for CentOS 8 as well?
OR
Is there a separate advisory bulletin CentOS 8 security advisories are published?

We will need official documentation/advisory on this.