Hi,
RedHat published an update for bind two weeks ago - it's fixed some bind vulnerabilities (https://access.redhat.com/errata/RHSA-2019:1294).
There's a commit 'import bind-9.9.4-74.el7_6.1' on https://git.centos.org/rpms/bind/commits/c7 since 12 ago but http://mirror.centos.org/ still ships the old non-updated version of bind (bind-9.9.4-73.el7_6.x86_64.rpm)
Couldn't find bind on cbs.centos.org but I'm not really familiar with the building / publishing process at CentOS.
Which steps are between ' RedHat published an update' and ' mirror.centos.org'?
Best regards, Robért
Okay, some minutes before I post this question - the update was pushed to mirror.centos.org and an announcement was published: https://lists.centos.org/pipermail/centos-announce/2019-June/023321.html
But the actually question still remains: Which steps are between 'RedHat published an update' and 'mirror.centos.org'?
At Fedora there's 'Bodhi' where Users can review/test new updates - and give positive karma for working updates. Is there something similar for Centos or are updates checked by selected audience?
Best regards, Robért
cosml@rsguhr.eu hat am 11. Juni 2019 um 01:17 geschrieben:
Hi,
RedHat published an update for bind two weeks ago - it's fixed some bind vulnerabilities (https://access.redhat.com/errata/RHSA-2019:1294).
There's a commit 'import bind-9.9.4-74.el7_6.1' on https://git.centos.org/rpms/bind/commits/c7 since 12 ago but http://mirror.centos.org/ still ships the old non-updated version of bind (bind-9.9.4-73.el7_6.x86_64.rpm)
Couldn't find bind on cbs.centos.org but I'm not really familiar with the building / publishing process at CentOS.
Which steps are between ' RedHat published an update' and ' mirror.centos.org'?
Best regards, Robért _______________________________________________ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Okay, some minutes before I post this question - the update was pushed to mirror.centos.org and an announcement was published: https://lists.centos.org/pipermail/centos-announce/2019-June/023321.html
But the actually question still remains: Which steps are between 'RedHat published an update' and 'mirror.centos.org'?
At Fedora there's 'Bodhi' where Users can review/test new updates - and give positive karma for working updates. Is there something similar for Centos or are updates checked by selected audience?
In contrast to Fedora the updates for CentOS mean mostly rebuild from the upstream sources. So testing is probably only needed for the correct build but not for included updates. They were already tested by upstream.
Regards, Simon
On 6/11/19 12:45 AM, cosml@rsguhr.eu wrote:
Okay, some minutes before I post this question - the update was pushed to mirror.centos.org and an announcement was published: https://lists.centos.org/pipermail/centos-announce/2019-June/023321.html
But the actually question still remains: Which steps are between 'RedHat published an update' and 'mirror.centos.org'?
At Fedora there's 'Bodhi' where Users can review/test new updates - and give positive karma for working updates. Is there something similar for Centos or are updates checked by selected audience?
The steps are that the source code is released to git.centos.org .. in this case, the source code was released here:
https://git.centos.org/rpms/bind/commits/c7
Then the source code for all the updates that happen at that time are downloaded to our build system and built. Then we do builds for x86_64, i686, ppc64 , ppc64le, aarch64, armhfp for all updates.
Those builds can be looked at here:
https://buildlogs.centos.org/c7.1810.00.x86_64/
(and all the other arches)
Then once everything builds, it gets pushed to the signing and then to CI testing:
https://ci.centos.org/view/CentOS-Core/job/C7-x86_64-Pretest-Updates/
(and all the other arches)
Then if/when it passes, it is released.
cosml@rsguhr.eu hat am 11. Juni 2019 um 01:17 geschrieben:
Hi,
RedHat published an update for bind two weeks ago - it's fixed some bind vulnerabilities (https://access.redhat.com/errata/RHSA-2019:1294).
There's a commit 'import bind-9.9.4-74.el7_6.1' on https://git.centos.org/rpms/bind/commits/c7 since 12 ago but http://mirror.centos.org/ still ships the old non-updated version of bind (bind-9.9.4-73.el7_6.x86_64.rpm)
Couldn't find bind on cbs.centos.org but I'm not really familiar with the building / publishing process at CentOS.
Which steps are between ' RedHat published an update' and ' mirror.centos.org'?
On 6/11/19 2:20 PM, Johnny Hughes wrote:
On 6/11/19 12:45 AM, cosml@rsguhr.eu wrote:
Okay, some minutes before I post this question - the update was pushed to mirror.centos.org and an announcement was published: https://lists.centos.org/pipermail/centos-announce/2019-June/023321.html
But the actually question still remains: Which steps are between 'RedHat published an update' and 'mirror.centos.org'?
At Fedora there's 'Bodhi' where Users can review/test new updates - and give positive karma for working updates. Is there something similar for Centos or are updates checked by selected audience?
The steps are that the source code is released to git.centos.org .. in this case, the source code was released here:
https://git.centos.org/rpms/bind/commits/c7
Then the source code for all the updates that happen at that time are downloaded to our build system and built. Then we do builds for x86_64, i686, ppc64 , ppc64le, aarch64, armhfp for all updates.
Those builds can be looked at here:
Actually .. the above link was the point release .. the UPDATES are here:
https://buildlogs.centos.org/c7.1810.u.x86_64/
<snip>
Johnny Hughes johnny@centos.org hat am 11. Juni 2019 um 15:24 geschrieben:
On 6/11/19 2:20 PM, Johnny Hughes wrote:
[...]
The steps are that the source code is released to git.centos.org .. in this case, the source code was released here:
https://git.centos.org/rpms/bind/commits/c7
Then the source code for all the updates that happen at that time are downloaded to our build system and built. Then we do builds for x86_64, i686, ppc64 , ppc64le, aarch64, armhfp for all updates.
Those builds can be looked at here:
Actually .. the above link was the point release .. the UPDATES are here:
https://buildlogs.centos.org/c7.1810.u.x86_64/
<snip>
Perfect, that was very instructive and helpful. Thanks :)
-
cosml＠rsguhr.eu -
Johnny Hughes -
Simon Matter