How long do security updates take?

General support questions
Post Reply
altiris
Posts: 334
Joined: 2013/05/31 01:27:50

How long do security updates take?

Post by altiris » 2015/07/28 00:27:25

Just wondering really, a few of the last major openssl vulnerabilities in June I believe took about a week or so from it being reported for it to get in CentOS so thats alright. This bug showed up in RHEL https://rhn.redhat.com/errata/RHSA-2015-1482.html however i do not think it has been added into CentOS? Generally, how long do security updates take from upstream? Could I be using an outdated mirror?

User avatar
TrevorH
Site Admin
Posts: 33219
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: How long do security updates take?

Post by TrevorH » 2015/07/28 00:33:10

The fix for that is part of 6.7. You can get advance access to what will become 6.7 by enabling the CentOS CR yum repository or wait until 6.7 is released in some as yet unspecified timespan.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

altiris
Posts: 334
Joined: 2013/05/31 01:27:50

Re: How long do security updates take?

Post by altiris » 2015/07/28 03:49:05

TrevorH wrote:The fix for that is part of 6.7. You can get advance access to what will become 6.7 by enabling the CentOS CR yum repository or wait until 6.7 is released in some as yet unspecified timespan.
Oh, so all CentOS/RHEL versions prior to 6.7 are vulnerable (not all of them but between 6 and 6.6)?
EDIT: Just read this http://wiki.centos.org/Manuals/ReleaseNotes/CentOS6.7 ahh so CentOS 6.7 is already out or getting ready to come out. Alright makes sense. Nice!

Post Reply