|
|
| Reporter | Christian Hailer | Assigned To | Mustafa Gezen | |
|---|
| Priority | normal | Severity | major | Reproducibility | always |
|---|
| Status | confirmed | Resolution | open | |
|---|
|
|
| Summary | 0002608: Security erratum not included in updateinfo.xml |
|---|
| Description | Hello,
the security erratum RLSA-2023:0835 is NOT included in the updateinfo.xml of the BaseOS repository, so tools like Katello for example won't import the erratum and therefore won't apply it automatically to registered systems.
A few weeks ago I stumbled upon another erratum which wasn't included but I can't remember which one it was.
Security scanners like Tenable complain about the unpatched packages, referencing the RLSA, and one has to update it manually.
Regards, Christian |
|---|
| Steps To Reproduce | [root@web ~]# rpm -q python3-setuptools
python3-setuptools-39.2.0-6.el8.noarch
[root@web ~]# dnf update --security python3-setuptools
Last metadata expiration check: 2:37:21 ago on Tue 14 Mar 2023 11:27:27 AM CET.
No security updates needed for "python3-setuptools", but 1 update available
Dependencies resolved.
Nothing to do.
Complete! |
|---|
| Additional Information | Erratum URL: https://errata.rockylinux.org/RLSA-2023:0835
updateinfo as of March 14th 2023: https://download.rockylinux.org/pub/rocky/8/BaseOS/x86_64/os/repodata/6c54586935d021b3f5ab63045a9334023fc70886832a143350ab2801601a1e7d-updateinfo.xml.gz
<data type="updateinfo">
<checksum type="sha256">6c54586935d021b3f5ab63045a9334023fc70886832a143350ab2801601a1e7d</checksum>
<open-checksum type="sha256">a5daa908ad58412844d927d9c870c59c1202b8e18e2a7e770d192bc1606a0bce</open-checksum>
<location href="repodata/6c54586935d021b3f5ab63045a9334023fc70886832a143350ab2801601a1e7d-updateinfo.xml.gz"/>
<timestamp>1678233820</timestamp>
<size>134364</size>
<open-size>1177117</open-size>
</data>
XML file attached below |
|---|
| Tags | No tags attached. |
|---|
| Attached Files | |
|---|
|
|
