Worth noting that people on RedHat still haven't received proper updates, only a workaround that disables two Comodo root certificates that were used to sign the emudhra certificates.

https://access.redhat.com/security/vulnerabilities/RHSB-2026... - "Ongoing"

▲

gilrain 2 hours ago | parent [-]

RHEL also got the PHP patches hours after Debian.

I chose AlmaLinux last time I needed to, and it's been a great way to access the ecosystem — I heartily recommend it as a free RHEL! — but these past few days have me looking in envy at Debian. Corporate stability hasn't been what I expected.

▲

t0mas88 32 minutes ago | parent | next [-]

Commercial support in Linux seems to be loosing its advantage over Debian.

Ubuntu (including Ubuntu Pro) still doesn't have a CVE-2026-99999 patch while Debian does have it. For commercial operators a KVM guest escape vulnerability is quite important.

▲

l00sed an hour ago | parent | prev [-]

I honestly think you're better off with RHEL. They might have been slow to act in this situation, but do one scan on a Debian vs a RHEL system container image and I'm confident Debian's will show a lot more red than RHEL (even with the fedora)

	▲	jcgl 22 minutes ago \| parent [-]
		I remember RHEL being quite slow with copyfail as well. It'd be nice to have some more comprehensive statistics though. And I don't put a lot of faith in container scans as a metrics. (More properly, I don't have faith in most containers scanners to properly identify package versions and backports.)