Help with install Security Updates

Support for security such as Firewalls and securing linux
Post Reply
kajafarov
Posts: 6
Joined: 2021/11/16 10:19:09

Help with install Security Updates

Post by kajafarov » 2021/11/16 10:41:03

Hi, All
I'm new, please help. IT sec team inform me about vulnerabilities CentOS Security Update for kernel (CESA-2021:0856) or CentOS Security Update for kernel (CESA-2020:4060).

OS. Centos7

As i knew from other posts, that Centos not able show information by this command "yum updateinfo info all" as (Oracle Linux or Rhat).

I tried use "yum -y update --security" and below information.
No packages needed for security; 0 packages available
No packages marked for update

Please give me right manual, how check security updates as installed and install new one by --advisory or cve or by command for update all security updates.

Thank you.

User avatar
TrevorH
Site Admin
Posts: 33202
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: Help with install Security Updates

Post by TrevorH » 2021/11/16 13:23:46

CentOS does not issue security metadata so the entire yum-security package does not function. On CentOS to keep up to date with security you just run yum update and apply all patches.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

kajafarov
Posts: 6
Joined: 2021/11/16 10:19:09

Re: Help with install Security Updates

Post by kajafarov » 2021/11/16 13:41:17

Thank you for quick answer. As I understand, that if I use specific app that shouldn't updated, that means I can't ignore update? I mean yum update command update all soft what I have. Can I exlude them ?

User avatar
TrevorH
Site Admin
Posts: 33202
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: Help with install Security Updates

Post by TrevorH » 2021/11/16 14:44:13

RHEL (and thus CentOS) uses a stable ABI that should not break on updates. There should be no reason not to update.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

kajafarov
Posts: 6
Joined: 2021/11/16 10:19:09

Re: Help with install Security Updates

Post by kajafarov » 2021/11/16 15:02:06

TrevorH wrote:
2021/11/16 14:44:13
RHEL (and thus CentOS) uses a stable ABI that should not break on updates. There should be no reason not to update.
Thank you.

Post Reply