9 Dec
2020
9 Dec
'20
7:55 p.m.
On Wed, 9 Dec 2020 13:22:15 -0500 Matthew Miller mattdm@mattdm.org wrote:
On Wed, Dec 09, 2020 at 09:58:10AM -0600, Barry Brimer wrote:
If the same happened in the previous question but was in a package or set of packages that was being rebased in 8.5 would it work the same way?
Hmmm. I'm not sure I understand you. There won't be a dump of 8.5 packages into Stream at some point. They will be updated there as ready.
The scenario I imagine is this:
start out the same EL 8.4 foo-1.1.1-1 stream-8 foo-1.1.1-1
update stream for EL 8.5
EL 8.4 foo-1.1.1-1 stream-8 foo-1.2.0-1
CVE!
EL 8.4 foo-1.1.2-1 stream-8 foo-1.2.1-1
Result: foo-1.1.2-1 is in EL but not stream.
Jim