[CentOS] OpenSSL Update - not a security update???

Wed Mar 2 03:17:23 UTC 2016
Peter <peter at pajamian.dhs.org>

On 02/03/16 15:57, Anthony K wrote:
> This command output is odd:
> 
> yum update --security
> ...
> No packages needed for security; 118 packages available
...
> Why does yum not consider this CESA a security update?

Cherry-picking updates is not supported by CentOS, this is because each
package is built on a system with all previous updates applied and as
such each update that you install should have all previous updates
applied or there can be problems.

As such CentOS does not support the --security option for yum, nor does
it support the yum-security plugin.  You are expected to update your
entire system, not to do so will leave you with an unsupported system.
Also there will be other packages as well that have security issues that
need updating.


Peter