Disturbing lack of FE security updates announcements!

[Luke Macken]

On Fri, Nov 10, 2006 at 10:23:28AM +0530, Rahul Sundaram wrote:
> Ralf Corsepius wrote:
> >On Thu, 2006-11-09 at 22:40 -0500, Jesse Keating wrote:
> >>On Thursday 09 November 2006 13:30, Ralf Corsepius wrote:
> >>>>There are many users of Fedora in general that wish to only take in
> >>>>security fixes and not 'random update maintainer thought was cool'.
> >>>Urban legend: Fedora user run yum, therefore they get what is being
> >>>pushed - If they don't run yum, they doen't even get it running.
> >>With a proper update tool, you can mark an update as being a security 
> >>update, and it will show as such in things like pirut.
> >
> >How does pirut access other sources of information than yum does (repos
> >and rpms)?
> 
> It doesnt have to. The metadata is already there. Luke did that work at 
> http://people.redhat.com/lmacken/metadata/

The code on that page is actually from the original prototype, which
used createrepo to pull down the update metadata from a central
location.

I have since removed that code from createrepo, and now the update
system uses modifyrepo[0] to insert this metadata into the repository.
>From here, the client tools use the yum.update_md module to utilize this
metadata.

I just took my people.redhat.com/lmacken/metadata page down as to not
cause any more confusion :)

luke

[0]:
https://lists.dulug.duke.edu/pipermail/rpm-metadata/2006-August/000687.html