 |
Can you please file the bug at bugzilla.redhat.com ( and crosslink that bug with this one for easier tracking) ? CentOS is built from the sources published by RedHat and once they fix the problem , the fix will automatically be included in CentOS as well. |
 |
https://bugzilla.redhat.com/show_bug.cgi?id=1838187 |
|
|
Please note: The folks at RedHat are dragging their feet and do not want to fix the bug since their releases have a short lifespan, unlike CentOS. Someone at CentOS would need to simply replace the RHEL7 gnutls package with one created from the fixed sources. |
 |
That is not how CentOS works. We rebuild from the sources of RHEL, not from individuall sources. See first reply. |
|
|
@hazyl: The aim of CentOS is to reproduce each and every possible feature from the equivalent RHEL distribution, bug for bug. So unfortunately there will be no such fix, unless it is found to be _extremely_ important, in which case it could be published via the centosplus repo. Traditionally this has happened very very rarely and I doubt CentOS will diverge this time. |
|
|
@tigalch and @ManuelWolfshant: Yes, I am aware of how CentOS works. That being said, the bug prevents people from reading their email. That, from all practical points of view, qualifies as a serious bug. Since CentOS 7 still has plenty of service life left, while RHEL-7 does not, I would like to kindly suggest fixing the bug irrespective of RHEL. |
|
|
Unfortunately from RedHat's point of view GnuTLS seems to be a second class citizen as they favor openssl for almost everything. And since claws-mail is neither the only existing mail client nor provided by RedHat/Centos, I see zero chance of having another version of gnutls provided by CentOS. Especially as we cannot know which bugs or incompatibilities with other provided applications that might introduce and we cannot do that type of QA and regression testing. Since you seem to already do some building, I suggest to build and use yourself a patched ( or newer ) GnuTLS. You could start from the source rpm provided by Fedora. |
 |
CentOS 7 has exactly the same shelf life left as RHEL 7 does. It is a rebuild of the same sources so if RHEL 7 is unmaintained then so is CentOS. But it isn't, RHEL is maintained until 2024. And a serious bug is a security one marked as critical and allowing remote code execution or similar, not a "I can't read my email" |
- Anonymous
