[CVE-2018-3639] libvirt rpm package for CentOS 6.8

Support for security such as Firewalls and securing linux
Post Reply
arun168403
Posts: 7
Joined: 2018/07/13 12:12:56

[CVE-2018-3639] libvirt rpm package for CentOS 6.8

Post by arun168403 » 2018/07/18 13:20:04

Hi,

Our application is running on top of CentOS6.8.
During our search for solution to CVE-2018-3639 of CentOS patches we find the libvirt-0.10.2-62.el6_9.2.x86_64.rpm is available only for CentOS 6.9.

Could you kindly confirm whether this package can be installed on top of CentOS 6.8 as well?

If not, could you suggest which version of rpm can be used for CentOS6.8 which has fix for CVE-2018-3639.

Regards,
Arun

User avatar
avij
Retired Moderator
Posts: 3046
Joined: 2010/12/01 19:25:52
Location: Helsinki, Finland
Contact:

Re: [CVE-2018-3639] libvirt rpm package for CentOS 6.8

Post by avij » 2018/07/18 13:41:23

We stopped shipping updates for 6.8 when 6.9 was released upstream, and also stopped releasing updates for 6.9 when 6.10 was released upstream. Older releases than 6.10 are not supported.

Actually, what you would want is libvirt-0.10.2-64.el6.x86_64.rpm. This is included in CentOS 6.10 and fixes CVE-2018-3639.

As for if it can be installed on 6.8 .. maybe? I would suggest upgrading one of your test servers (running your application) to 6.10 to see if there are any issues. If not, I'd suggest updating all your other servers to 6.10 as well.

User avatar
TrevorH
Site Admin
Posts: 33202
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: [CVE-2018-3639] libvirt rpm package for CentOS 6.8

Post by TrevorH » 2018/07/18 14:02:32

Please be aware that only the most recent point release of CentOS receives updates. Once a new point release comes out, all previous ones are obsolete and need to be updated to the new one.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

Post Reply