[CentOS] OpenSSL Update - not a security update???

Peter peter at pajamian.dhs.org
Wed Mar 2 03:17:23 UTC 2016


On 02/03/16 15:57, Anthony K wrote:
> This command output is odd:
> 
> yum update --security
> ...
> No packages needed for security; 118 packages available
...
> Why does yum not consider this CESA a security update?

Cherry-picking updates is not supported by CentOS, this is because each
package is built on a system with all previous updates applied and as
such each update that you install should have all previous updates
applied or there can be problems.

As such CentOS does not support the --security option for yum, nor does
it support the yum-security plugin.  You are expected to update your
entire system, not to do so will leave you with an unsupported system.
Also there will be other packages as well that have security issues that
need updating.


Peter



More information about the CentOS mailing list