AlmaLinux / AlmaLinux/build-system
Red Hat errata synchronization issues
- Dominant language
- No language data
- Stars
- 32
- Forks
- 11
- PR merge metrics
- No merged PRs in 30d
Description
In our aim to provide a 1:1 compatibility with Red Hat errata and for several reasons, we ensure that erratas are published in the Red Hat Errata website, and for doing that, we make use of the website's search engine before adding erratas to our pipeline. The problem that we're experiencing lately is that, for some reason:
* erratas can be retrieved from the security data API
* they have their corresponding html in the errata website
* BUT, for some reason, they don't appear in the website search engine
After some time, the erratas end up getting into our pipeline, but the problem is becoming more and more recurrent as we get more and more people asking about those missing erratas in our forums/chat/email/etc.
Until now, all the vulnerabilities from the "missing" erratas have been fixed, as our source packages synchronization from upstream happens almost instantly. The problem is that, if the errata is missing, some people might think that we haven't fixed it, when it is indeed fixed. i.e.: https://forums.almalinux.org/t/postgresql-12-update/5676
We need to:
* Identify those "missing" erratas
* Get them added into our pipeline and process them as normally
* Notify Red Hat about this synchronization issue on their side
Contributor guide
Assessment
This issue has not been assessed yet.