<html><body bgcolor="#FFFFFF"><div>On Feb 23, 2011, at 9:08 PM, "Machin, Greg" <<a href="mailto:Greg.Machin@openpolytechnic.ac.nz">Greg.Machin@openpolytechnic.ac.nz</a>> wrote:<br><br></div><div></div><blockquote type="cite"><div>
<div class="WordSection1">
<p class="MsoNormal">Hi.<o:p></o:p></p>
<p class="MsoNormal">I have had an enquiry from the Network and Security guy. He
wants to know why CentOS 5.5 /RHEL 5 is using a very old version of bind “bind-chroot-9.3.6-4.P1.el5_5.3”
when the latest release that has many security fixes is on 9.7.3 . I understand
that its to maintain a known stable platform by in introducing new elements etc
.. Is there an official explanation / document that I can direct him to.</p></div></div></blockquote><br><div>Please check out:</div><div><br></div><a href="https://access.redhat.com/security/updates/backporting/?sc_cid=3093">https://access.redhat.com/security/updates/backporting/?sc_cid=3093</a><div><br></div><div>RHEL maintains application binary interfaces during the lifetime of their releases. Only for applications that can no longer be feasibly maintained through backporting (ie firefox) do they update the version mid release.</div><div><br></div><div>A lot of people don't understand the backporting way of maintaining a stable platform across a release, it took me a while to appreciate it.</div><div><br></div><div>-Ross</div><div><br></div></body></html>