Unable to install October 2020 CESA Patches

Support for security such as Firewalls and securing linux
Post Reply
SquareFish
Posts: 2
Joined: 2020/11/12 16:57:48

Unable to install October 2020 CESA Patches

Post by SquareFish » 2020/11/12 18:36:16

Hi all,

We're running into an issue where we've detected a number of our servers are vulnerable to the following:

CESA-2020:3952
CESA-2020:3978
CESA-2020:3901
CESA-2020:4060
CESA-2020:3916

We have run the following commands and are still not seeing these packages.

Code: Select all

sudo yum clean all | sudo rm -r /var/cache/yum | sudo yum update
However, we cannot find these updated packages at all. Additionally we've looked on the official CentOS 7 updates mirror and are still unable to find these packages. Screenshots included are for kernel-3.10.0-1160.el7, we're only seeing kernel-3.10.0-1127.x.x.el7. This is the same case for the other packages listed in the CESA advisories. The other screenshot is for our yum repos.

Additional info:

October 2020
https://lists.centos.org/pipermail/cent ... 0-October/
Attachments
yum_repos.png
yum_repos.png (6.59 KiB) Viewed 160 times
centos_7_mirror_kernel.png
centos_7_mirror_kernel.png (51.5 KiB) Viewed 160 times

tunk
Posts: 832
Joined: 2017/02/22 15:08:17

Re: Unable to install October 2020 CESA Patches

Post by tunk » 2020/11/12 21:26:35

CentOS 7.9 was released earlier today, I guess the mirrors will be updated shortly.

User avatar
TrevorH
Forum Moderator
Posts: 29915
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: Unable to install October 2020 CESA Patches

Post by TrevorH » 2020/11/13 19:46:54

Up until yesterday the fixes you reference were part of the CR repo for 7.8 and you could have applied them at any point in the last 3 or 4 weeks by using yum --enablerepo=cr update.

Now that 7.9 is officially out you do not need to enable the CR repo but you may need to yum clean all first to clean out old metadata for the 7.8 repos and pick up the 7.9 refresh. That would expire on its own after whatever time interval you have configured in yum.conf - default 6h.
CentOS 6 will die in November 2020 - migrate sooner rather than later!
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 is dead, do not use it.
Full time Geek, part time moderator. Use the FAQ Luke

SquareFish
Posts: 2
Joined: 2020/11/12 16:57:48

Re: Unable to install October 2020 CESA Patches

Post by SquareFish » 2020/11/17 19:06:40

Thanks @TrevorH , we saw the option to use the CR repos, but opted not to as we don't want any accidental complications in prod.

SInce 7.9 released we aren't seeing this issue anymore, thanks all!

Post Reply

Return to “CentOS 7 - Security Support”