Any news on when a fixed release for Januscape (CVE-2026-53359), the KVM/x86 guest-to-host escape vulnerability, will be available?

RHEL has lost a lot of reputation by not providing important security updates on time, so I wouldn’t even use the free developer subscription, let alone a paid subscription. And it’s not okay that servers which are run not-for-profit can be vulnerable to exploits for a long time because they don’t pay for support. Such an attitude harms the Internet as a whole. Maintaining a Linux distribution is hard and if maintainers don’t have the manpower to provide security updates quickly then the purpose of such a distribution is questionable.