Repository version suffixes

If you are using the remediated repository or predisclosure repository, your artifacts include backported security fixes identified by a version suffix.

Remediated repository

Red Hat backports fixes to existing upstream versions. You choose the specific version you want to update, and the scope of each security patch is limited to the fix itself.

Patched artifacts are identified by a version suffix appended to the original upstream version:

• .rhlw-0000X — A sequential counter tracking cumulative security patches applied to that version.

For example, 5.3.17.rhlw-00001 means:

• The base upstream version is 5.3.17.
• This is the first Lightwell build that contains security patches applied to this version.

A subsequent fix to the same version would produce 5.3.17.rhlw-00002. These suffixed versions are available to resolve when your build tool is configured to use the remediated repository.

Predisclosure repository

Red Hat includes fixes for novel vulnerabilities before public disclosure. Each package in this repository extends the versioning from the remediated repository with an additional -nXXXX suffix.

For example, if the Remediated version upon which this repository is built is 5.3.17.rhlw-00001 then the predisclosure version looks like 5.3.17.rhlw-00001-n0001

New builds increment the suffix and contain the cumulative set of patches.