[CentOS] CentOS rpm versioning

Mon Mar 16 16:17:08 UTC 2020
koka miptpatriot <miptpatriot at gmail.com>

Hello

Clair vulnerability scanner considers the latest version of CentOS mariadb
vulnerable, because of RHSA-2019:3708
It states, that mariadb must be updated at least to the version
"10.3.17-1.module+el8.1.0+3974+90eded84". CentOS' last version is
"10.3.17-1.module_el8.1.0+257+48736ea6". Rpm/yum considers CentOS' version
older, than RHEL's.

% rpmdev-vercmp 3:10.3.17-1.module_el8.1.0+257+48736ea6 3:10.3.17-1.module+
el8.1.0+3974+90eded84
3:10.3.17-1.module_el8.1.0+257+48736ea6 < 3:10.3.17-1.module+el8.1.0+3974+
90eded84

That's why Clair considers it's vulnerable. Is there any way to fix it?

-- 
skype: miptpatriot