News for hackers. Stuff that matters.
Re:AlmaLinux No Longer Aims for 1:1 Compatibility with RHEL by KingMachiavelli on Friday July 14, 2023 @12:28AM (#36719489)
I've though about building a tool to scrape all of these Linux distro specific package changes and bug reports into a common place. It's always seemed weird to me that critical security patches are managed in obscure repos, bug trackers, internal build systems.

I don't mean every open source project needs to use GitHub but some of these home grown tools are just really hard to use. The PHP bug tracker's main page doesn't even have a link to view 8.1 or 8.2 bugs but has one for 7.2.

Re:AlmaLinux No Longer Aims for 1:1 Compatibility with RHEL by technion on Friday July 14, 2023 @01:42AM (#36719897)
Last time I raised this I was told to subscribe to RedHat's notifications.

Now I get 10+ emails a day related to some Openshift module I've never heard of, and the one thing I know for sure is that it a CVSS10.0 comes in nginx out I'll completely miss it in the noise.

Re:AlmaLinux No Longer Aims for 1:1 Compatibility with RHEL by bclemens on Friday July 14, 2023 @04:00AM (#36720738)
For the security part at least, there are a few efforts to combine all the errata in one place, for example https://osv.dev/list?ecosystem=Rocky+Linux
Re:AlmaLinux No Longer Aims for 1:1 Compatibility with RHEL by pabs3 on Saturday July 15, 2023 @02:24AM (#36734128)
repology.org already scrapes all the versions, so it would be good to add bugs and patches there too. The service is open source too.