AlmaLinux / AlmaLinux/build-system

Red Hat errata synchronization issues

未關閉
#464 3 則留言 0 個 reaction 已指派 0 人 在 GitHub 檢視
bug enhancement errata
主要語言
沒有語言資料
星號
32
分支
11
PR 合併指標
30 天內沒有已合併 PR

描述

In our aim to provide a 1:1 compatibility with Red Hat errata and for several reasons, we ensure that erratas are published in the Red Hat Errata website, and for doing that, we make use of the website's search engine before adding erratas to our pipeline. The problem that we're experiencing lately is that, for some reason:
* erratas can be retrieved from the security data API
* they have their corresponding html in the errata website
* BUT, for some reason, they don't appear in the website search engine

After some time, the erratas end up getting into our pipeline, but the problem is becoming more and more recurrent as we get more and more people asking about those missing erratas in our forums/chat/email/etc.

Until now, all the vulnerabilities from the "missing" erratas have been fixed, as our source packages synchronization from upstream happens almost instantly. The problem is that, if the errata is missing, some people might think that we haven't fixed it, when it is indeed fixed. i.e.: https://forums.almalinux.org/t/postgresql-12-update/5676

We need to:
* Identify those "missing" erratas
* Get them added into our pipeline and process them as normally
* Notify Red Hat about this synchronization issue on their side

貢獻指南

開啟貢獻指南

評估

這個 Issue 還沒有評估資料。

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。