Uploaded image for project: 'CentOS Stream Pipeline'
  1. CentOS Stream Pipeline
  2. CS-2776

Update OpenSSL build in CentOS

XMLWordPrintable

    • Icon: Task Task
    • Resolution: Done
    • Icon: Normal Normal
    • None
    • None
    • Pipeline
    • 1
    • None
    • Testable

      We have recently fixed an embargoed CVE for OpenSSL in RHEL 9.5 and the build was inherited by 9.6 to avoid extra QE job.

      Unfortunately, as landing in CentOS implies a build in RHEL, it means that we have to land an updated build in RHEL - that is what we want to avoid.

      I bumped a version in CentOS and built it with `--rhel-target none` and then performed a dummy build by rhpkg (I think for 9.6) but it didn't fix the situation. If I ungate the build, it will create the needless erratum

      I think that the idea that the build doesn't go to CentOS without a corresponding build in RHEL complicates things (I came across it already and don't remember how I fixed it).

      I'm looking for a guidelines in this situation

              asamalik@redhat.com Adam Samalik
              dbelyavs@redhat.com Dmitry Belyavskiy
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: