Joshua Bahnsen <archrival@xxxxxxxxx> writes: > I think I have one final question, is it possible to install the rpm > provided by the specific advisory and not necessarily the most recent > version of the package associated with the advisory? > > For example: > > RHBA-2004:265-23 bugfix bash-2.05b-29.0.3.i386 > RHBA-2005:437-11 bugfix bash-2.05b-41.4.i386 > RHBA-2006:0064-02 bugfix bash-2.05b-41.5.i386 > RHBA-2006:0311-04 bugfix bash-2.05b-41.7.i386 > > Say I had change control in place and only bash version 2.05b-41.5 was > approved, can I install that version using yum and yum-security based on the > advisory? > > 'yum update --advisory=RHBA-2006:0064-02' will install bash-2.05b-41.7, > which I don't want. Is there a plug-in or a configuration option that will > allow me to deploy the packages provided by the advisory? The yum-security in RHEL-5.3 has an update-minimal command, which does exactly that. Eg. yum update-minimal --security ...will update to the oldest pkgs which fix all security bugs. Note that you need the old packages available (as the RHEL-5.3 repos. do). Also with recentish yum versions you can manually do: yum update blah-1.2.3 which will work even if blah-1.4.6 is available. -- James Antill -- james@xxxxxxx _______________________________________________ Yum mailing list Yum@xxxxxxxxxxxxxxxxx http://lists.baseurl.org/mailman/listinfo/yum