Red Hat and Superseded Patches

[vk.khurava]

@LouC

If you were to only select Category “Security” when configuring your patch policy then am i correct to assume that the CVE’s that are addressed by RHSA-2023:6368 would never be remediated since the patch policy is not including bug fixes?

Thats correct ! WebUI patch policy is designed that way.

Superseded fixlets on Patch Policy - Customer Support

There is no other choice if you want to use superseded patches than the traditional approaches of direct patch or baseline deployment.

Pre-Announcement: Superseded patch changes for Patches for Windows

IBM BigFix Patch will be enhancing how superseded OS patches are handled starting with the December Windows OS patch content on Dec 12, 2017. The current behavior where patches become not relevant when they are superseded will be maintained, by default. An option is being introduced to allow superseded patches to continue to be evaluated for applicability. What is changing? Superseded Windows OS patches will maintain their current applicability relevance and introduce an option to continue re…