On Mon, Apr 1, 2024 at 9:17 PM Matthew Miller mattdm@fedoraproject.org wrote:
On Mon, Apr 01, 2024 at 05:47:10PM +0000, Gary Buhrmaster wrote:
It does bring up a potential point that perhaps Fedora should have an additional repo (let's call it "emergency fixes") that is not community mirrored (so any mirrors for load sharing would be fully controlled by the project), with a short refresh time, and containing only packages that need to get out immediately. If a critical fix needs to get out to the community it could be (almost) immediately available. After a few days (when public mirrors would be expected to have updated) those packages could be removed (reducing the load on this repo). For the next time, of course (and there will be a next time, there is always a next time).
https://pagure.io/releng/issue/5886
(This was after Heartbleed, FWIW.)
I am glad to know "it's all good" :-(