On Fri, Oct 31, 2014 at 06:09:13AM +0100, Reindl Harald wrote:
i wonder if 3.16.7 contains all the 3.16.3 CVE-fixes from
previous 3.16.6 ones from Fedora because
They weren't added upstream, which is why the upstream ChangeLog doesn't
list them. Sometimes the CVE information for a patch isn't listed there
anyway. They're still in the Fedora kernel build of the same as
add-on patches. This happens quite frequently.