Mirror.CentOS.org Ships Non-updated Version Of Bind ?
Hi,
RedHat published an update for bind two weeks ago – it’s fixed some bind vulnerabilities (https://access.redhat.com/errata/RHSA-2019:1294).
There’s a commit ‘import bind-9.9.4-74.el7_6.1’ on https://git.CentOS.org/rpms/bind/commits/c7 since 12 ago but http://mirror.CentOS.org/ still ships the old non-updated version of bind (bind-9.9.4-73.el7_6.x86_64.rpm)
Couldn’t find bind on cbs.CentOS.org but I’m not really familiar with the building / publishing process at CentOS.
Which steps are between ‘ RedHat published an update’ and ‘ mirror.CentOS.org’?
Best regards, Robért
3 thoughts on - Mirror.CentOS.org Ships Non-updated Version Of Bind ?
In contrast to Fedora the updates for CentOS mean mostly rebuild from the upstream sources. So testing is probably only needed for the correct build but not for included updates. They were already tested by upstream.
Regards, Simon
The steps are that the source code is released to git.CentOS.org .. in this case, the source code was released here:
https://git.CentOS.org/rpms/bind/commits/c7
Then the source code for all the updates that happen at that time are downloaded to our build system and built. Then we do builds for x86_64, i686, ppc64 , ppc64le, aarch64, armhfp for all updates.
Those builds can be looked at here:
https://buildlogs.CentOS.org/c7.1810.00.x86_64/
(and all the other arches)
Then once everything builds, it gets pushed to the signing and then to CI testing:
https://ci.CentOS.org/view/CentOS-Core/job/C7-x86_64-Pretest-Updates/
(and all the other arches)
Then if/when it passes, it is released.
Actually .. the above link was the point release .. the UPDATES are here:
https://buildlogs.CentOS.org/c7.1810.u.x86_64/