Re: OpenSSL Update - not a security update???

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



On 2 March 2016 at 11:24, Anthony K <akcentos@xxxxxxxxxx> wrote:

> On Tue, 2016-03-01 at 21:58 -0600, Johnny Hughes wrote:
> > On 03/01/2016 09:41 PM, Johnny Hughes wrote:
> > > BUt the security plugins do not work for CentOS and they never have,
> > > Peter is correct, you need to run yum update or call out the specific
> > > packages you want updated.
> > >
>
> I totally understand the necessity of a full system update.  However, this
> begs
> the question "Why code an option into yum that is of no use?"  Was there a
> time
> when this option was functional?  If yes, what caused its removal?  Was it
> a
> system compromise at some big corporation and someone got sued/fired?
> What?
>  Don't spare any gory details either!
>
>
>
Specifically it requires errata data within the repo metadata.

It exists in yum since CentOS is a RHEL rebuild and upstream provides that
errata data for RHEL users.

If you set up something like Spacewalk then you can use something like CEFS
to import that errata data to make --security work for centos systems.

 https://cefs.steve-meier.de/

Potentially you could use a combination of his work, a bit of scripting and
createrepo to provide your own errata data.

*That all being said* apply all errata still applies whenever issues arise
;)
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
https://lists.centos.org/mailman/listinfo/centos



[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]
  Powered by Linux