AlmaLinux / AlmaLinux/build-system

Red Hat errata synchronization issues

Open
#464 3 comments 0 reactions 0 assignees View on GitHub
bug enhancement errata
Dominant language
No language data
Stars
32
Forks
11
PR merge metrics
No merged PRs in 30d

Description

In our aim to provide a 1:1 compatibility with Red Hat errata and for several reasons, we ensure that erratas are published in the Red Hat Errata website, and for doing that, we make use of the website's search engine before adding erratas to our pipeline. The problem that we're experiencing lately is that, for some reason:
* erratas can be retrieved from the security data API
* they have their corresponding html in the errata website
* BUT, for some reason, they don't appear in the website search engine

After some time, the erratas end up getting into our pipeline, but the problem is becoming more and more recurrent as we get more and more people asking about those missing erratas in our forums/chat/email/etc.

Until now, all the vulnerabilities from the "missing" erratas have been fixed, as our source packages synchronization from upstream happens almost instantly. The problem is that, if the errata is missing, some people might think that we haven't fixed it, when it is indeed fixed. i.e.: https://forums.almalinux.org/t/postgresql-12-update/5676

We need to:
* Identify those "missing" erratas
* Get them added into our pipeline and process them as normally
* Notify Red Hat about this synchronization issue on their side

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.