Jonathan Wright

You could try the new native packages built for Fedora too: https://github.com/WerWolv/ImHex/actions/runs/2767434620#artifacts

Any updates on this so CVEs can be resolved?

The geolocation data is incorrect. Can you please check and fix?

Looking into how we can best address this. Even if we fix the mirrorlist itself most mirrors are using LE certs which are signed with a 2048-bit CA.

> > Looking into how we can best address this. > > Even if we fix the mirrorlist itself most mirrors are using LE certs which are signed with a...

There is a temporary fix/cert in place for this so you should not get the errors now. We'll keep this issue open until we decide how we'll solve this permanently.

Renewed cert.

We do have https://github.com/AlmaLinux/mirrors/blob/mirrors_service/src/backend/api/handlers.py#L145 to randomize the geo-based ones a bit. Are you also wanting to have the network-based ones randomized? I don't think failure mode 1 that you cited...

This is a great suggestion. @soksanichenko let's make this happen :)

Are you trying to use spacewalk with our mirrorlist instead of locally-hosted mirrors with direct URLs?