AlmaLinux / AlmaLinux/build-system

Red Hat errata synchronization issues

未关闭
#464 3 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
bug enhancement errata
主要语言
没有语言数据
星标
32
派生
11
PR 合并指标
30 天内没有已合并 PR

描述

In our aim to provide a 1:1 compatibility with Red Hat errata and for several reasons, we ensure that erratas are published in the Red Hat Errata website, and for doing that, we make use of the website's search engine before adding erratas to our pipeline. The problem that we're experiencing lately is that, for some reason:
* erratas can be retrieved from the security data API
* they have their corresponding html in the errata website
* BUT, for some reason, they don't appear in the website search engine

After some time, the erratas end up getting into our pipeline, but the problem is becoming more and more recurrent as we get more and more people asking about those missing erratas in our forums/chat/email/etc.

Until now, all the vulnerabilities from the "missing" erratas have been fixed, as our source packages synchronization from upstream happens almost instantly. The problem is that, if the errata is missing, some people might think that we haven't fixed it, when it is indeed fixed. i.e.: https://forums.almalinux.org/t/postgresql-12-update/5676

We need to:
* Identify those "missing" erratas
* Get them added into our pipeline and process them as normally
* Notify Red Hat about this synchronization issue on their side

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。