On Thu, 2024-04-04 at 10:06 +0200, John Paul Adrian Glaubitz wrote:
Thanks a lot for the elaborate and detailed explanation.
Out of curiosity: Why does Factory actually have an Update repository? Is it to be able to provide expedited updates for Tumbleweed necessary for occasions like the xz backdoor without having to wait for a new Tumbleweed snapshot?
The :Update repository was a learning back in the times of a bash CVE. This happened to strike us back then at a time where Factory was in a larger overhaul and we did not get it through QA for quite a while and we needed a way to still pish out fixes for such critical CVEs at that time. The channel is very rarely used - usually we have a 24 hour delay between snapshots. Things that blow up badly go out quicker (keep in mind: no QA on the Update channel - so we use it really REALLY seldom). Cheers, Dominique