[CentOS] A potentially newbie question about vulnerability patching speed in CentOS 7.x's yum repository

[Pete Biggs]

> 
> 
> Same problem happens to other software packages such as:
> glibc
> tcpdump
> libnl
> mariadb
> ...
> (and many others)
> 
> 
> Why is that? and are those software packages not going to get fixed?
> 
There have been various threads concerning this in the past month. You
can find them in the archives - a couple I found by a quick scan:

 https://lists.centos.org/pipermail/centos/2017-August/165910.html

 https://lists.centos.org/pipermail/centos/2017-August/165867.html

Basically the updates build against 7.4 and that was only released to
the CR repository a week ago. See

 https://lists.centos.org/pipermail/centos/2017-August/165930.html

and

 https://seven.centos.org/2017/08/cr-repository-for-centos-linux-7-1708-released/

It will all make it into the main repositories in due course.

Remember that CentOS is a community distro and as such resources are
limited so things don't happen immediately.  If the timing of the
release of updates is critical to you, then your best bet is to pay for
a RHEL subscription.

P.