Hello,
will there be updates for these CVEs for CentOS 6?
Thanks, Walter
On Jan 4, 2018, at 12:18 PM, Walter H. walter.h@mathemainzel.info wrote:
will there be updates for these CVEs for CentOS 6?
Red Hat hasn’t released them all yet. Quoting Christopher Robinson in the thread for this here:
https://access.redhat.com/errata/RHSA-2018:0007
"We will be pushing errata out as soon as they have passed our QA team's testing. The more modern versions were easier to backport patches from upstream, and as you progress backwards the fixes change from a backporting exercise into a complete rewrite. We expect all packages for RHEL7 to be available shortly, with RHEL6 following closely behind.”
Robinson’s reply then goes into other ramifications which don’t impact CentOS for one reason or another, except insofar as CentOS’s speed in responding to this is gated in large part by Red Hat’s ability to respond.
I have released everything for CentOS-6 that has been released upstream in RHEL source code.
I will continue to do so when they release new sources.
NOTE: We will NOT be releasing anything for CentOS versions before CentOS-6 (ie, CentOS-2.1, 3.x, 4.x, 5.x releases in vault that are past EOL will not get updates)
CentOS-6 and CentOS-7 will continue to get updates based on the specific version of RHEL source code released. Thanks, Johnny Hughes
On 01/04/2018 04:41 PM, Warren Young wrote:
On Jan 4, 2018, at 12:18 PM, Walter H. walter.h@mathemainzel.info wrote:
will there be updates for these CVEs for CentOS 6?
Red Hat hasn’t released them all yet. Quoting Christopher Robinson in the thread for this here:
https://access.redhat.com/errata/RHSA-2018:0007"We will be pushing errata out as soon as they have passed our QA team's testing. The more modern versions were easier to backport patches from upstream, and as you progress backwards the fixes change from a backporting exercise into a complete rewrite. We expect all packages for RHEL7 to be available shortly, with RHEL6 following closely behind.”
Robinson’s reply then goes into other ramifications which don’t impact CentOS for one reason or another, except insofar as CentOS’s speed in responding to this is gated in large part by Red Hat’s ability to respond. _______________________________________________ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
On Jan 5, 2018, at 9:02 AM, Johnny Hughes johnny@centos.org wrote:
I have released everything for CentOS-6 that has been released upstream in RHEL source code.
I will continue to do so when they release new sources.
NOTE: We will NOT be releasing anything for CentOS versions before CentOS-6 (ie, CentOS-2.1, 3.x, 4.x, 5.x releases in vault that are past EOL will not get updates)
CentOS-6 and CentOS-7 will continue to get updates based on the specific version of RHEL source code released. Thanks, Johnny Hughes
Thanks - do you know if anything else is expected to be released soon for CentOS 6 or 7?
Noam
How about kernel-lt and kernel-ml?
Mike
On 01/04/2018 05:41 PM, Warren Young wrote:
On Jan 4, 2018, at 12:18 PM, Walter H. walter.h@mathemainzel.info wrote:
will there be updates for these CVEs for CentOS 6?
Red Hat hasn’t released them all yet. Quoting Christopher Robinson in the thread for this here:
https://access.redhat.com/errata/RHSA-2018:0007"We will be pushing errata out as soon as they have passed our QA team's testing. The more modern versions were easier to backport patches from upstream, and as you progress backwards the fixes change from a backporting exercise into a complete rewrite. We expect all packages for RHEL7 to be available shortly, with RHEL6 following closely behind.”
Robinson’s reply then goes into other ramifications which don’t impact CentOS for one reason or another, except insofar as CentOS’s speed in responding to this is gated in large part by Red Hat’s ability to respond. _______________________________________________ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
On 07/01/18 16:11, Mike McCarthy, W1NR wrote:
How about kernel-lt and kernel-ml?
Mike
Mike,
If you are referring to kernel-lt and kernel-ml packages offered by elrepo, may I refer you to this post / thread:
http://lists.elrepo.org/pipermail/elrepo/2018-January/004031.html
Essentially, kernel-lt and kernel-ml contain all the latest fixes that are in the equivalent upstream kernel versions.
Further, I'd highly recommend you read Greg Kroah-Hartman's blog posting (below) summarising the current state of play within the Linux kernel for Meltdown and Spectre issues:
-
Johnny Hughes -
Mike McCarthy, W1NR -
Noam Bernstein -
Phil Perry -
Walter H. -
Warren Young