[CentOS] mirror.centos.org ships non-updated version of bind ?

2019-06-10 Thread cosml
Hi, RedHat published an update for bind two weeks ago - it's fixed some bind vulnerabilities (https://access.redhat.com/errata/RHSA-2019:1294). There's a commit 'import bind-9.9.4-74.el7_6.1' on https://git.centos.org/rpms/bind/commits/c7 since 12 ago but http://mirror.centos.org/ still ships

Re: [CentOS] mirror.centos.org ships non-updated version of bind ?

2019-06-10 Thread cosml
Okay, some minutes before I post this question - the update was pushed to mirror.centos.org and an announcement was published: https://lists.centos.org/pipermail/centos-announce/2019-June/023321.html But the actually question still remains: Which steps are between 'RedHat published an update' and

Re: [CentOS] mirror.centos.org ships non-updated version of bind ?

2019-06-11 Thread cosml
> Johnny Hughes hat am 11. Juni 2019 um 15:24 geschrieben: > > > On 6/11/19 2:20 PM, Johnny Hughes wrote: [...] > > > > The steps are that the source code is released to git.centos.org .. in > > this case, the source code was released here: > > > > https://git.centos.org/rpms/bind/commits/c7 >