AlmaLinux / AlmaLinux/build-system

Red Hat errata synchronization issues

Ouverte
#464 3 commentaires 0 réactions 0 personnes assignées Voir sur GitHub
bug enhancement errata
Langage dominant
Aucune donnée de langage
Étoiles
32
Forks
11
Métriques de merge des PR
Aucune PR mergée en 30 j

Description

In our aim to provide a 1:1 compatibility with Red Hat errata and for several reasons, we ensure that erratas are published in the Red Hat Errata website, and for doing that, we make use of the website's search engine before adding erratas to our pipeline. The problem that we're experiencing lately is that, for some reason:
* erratas can be retrieved from the security data API
* they have their corresponding html in the errata website
* BUT, for some reason, they don't appear in the website search engine

After some time, the erratas end up getting into our pipeline, but the problem is becoming more and more recurrent as we get more and more people asking about those missing erratas in our forums/chat/email/etc.

Until now, all the vulnerabilities from the "missing" erratas have been fixed, as our source packages synchronization from upstream happens almost instantly. The problem is that, if the errata is missing, some people might think that we haven't fixed it, when it is indeed fixed. i.e.: https://forums.almalinux.org/t/postgresql-12-update/5676

We need to:
* Identify those "missing" erratas
* Get them added into our pipeline and process them as normally
* Notify Red Hat about this synchronization issue on their side

Guide de contribution

Ouvrir le guide de contribution

Évaluation

Cette issue n'a pas encore été évaluée.

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.