Upgrade or not upgrade this is the question

[1cent1]

I have centos 5.9 server (with minimal installation without GUI etc ) – that running well , in my organization.
Current the only effort is done is updating the open SSH and open SSL to latest ant updated versions. (possible upgrade to CentOS 5.11)

Is this enough or I miss something ?

I am referring should we upgrade to centos 7 ? why doing this effort (If it ain't broke, don't fix it) ?


Thanks

[TrevorH]

You can update the system to 5.11 by running yum update and all high severity issues should be fixed by doing this. Unfortunately RHEL 5 is now in "Production Phase 3" which means that Redhat now only backport security fixes to it that are deemed "important" or "critical" so not all of the recent openssl bugs are fixed. The ones that are not fixed are those marked "moderate" or a lesser severity.

There is no upgrade path to newer CentOS versions so to replace 5 with 6 or 7 will require a reinstall.

[1cent1]

Thanks for your answer.

[TrevorH]

One correction: since I last posted Redhat have released a newer openssl package for el5 that fixes most of the CVE's that they had previously said that they were not going to fix...