[CentOS-devel] CVE-2011-3192 rpms for CentOS 5 still pending?

Karanbir Singh mail-lists at karan.org
Wed Sep 7 12:31:58 EDT 2011


On 09/07/2011 04:33 PM, Gianluca Cecchi wrote:
> On Wed, Sep 7, 2011 at 5:27 PM, Leon Fauster wrote:
>
>> Thats correct:
>>
>> rpm -qp --changelog http://mirror.centos.org/centos-5/5/cr/x86_64/RPMS/httpd-2.2.3-53.el5.centos.1.x86_64.rpm | head
>
> If a CentOS package contains aggregated upstream sequentially provided
> corrections, I think it is desirable to have all of the related
> RHSA/RHBA/RHEA links mentioned in the body of the related CentOS
> announce mail message.
> Just my opinion to provide better service.

A CentOS rpm only contains exactly what was in the corresponding srpm 
released upstream. The only changes are to branding.

- KB


More information about the CentOS-devel mailing list