On Mon, Apr 1, 2024 at 9:17 PM Matthew Miller <mattdm(a)fedoraproject.org> wrote:
On Mon, Apr 01, 2024 at 05:47:10PM +0000, Gary Buhrmaster wrote:
> It does bring up a potential point that perhaps
> Fedora should have an additional repo (let's
> call it "emergency fixes") that is not community
> mirrored (so any mirrors for load sharing
> would be fully controlled by the project), with
> a short refresh time, and containing only
> packages that need to get out immediately.
> If a critical fix needs to get out to the
> community it could be (almost) immediately
> available. After a few days (when public
> mirrors would be expected to have updated)
> those packages could be removed (reducing
> the load on this repo). For the next time, of
> course (and there will be a next time, there
> is always a next time).
https://pagure.io/releng/issue/5886
(This was after Heartbleed, FWIW.)