Web Hosting Talk







View Full Version : redhat security updates...


goodness0001
02-13-2002, 02:40 AM
Can someone post some good web sites for redhat security updates that should be applied throughout time...

JayPee
02-13-2002, 02:52 AM
Hey!

Have you tried RH's Red Hat Network? You can install their "up2date" script on your RH box, configure it, and run it periodically to find out if the RPM packages you're using are up to date.

It's a bit of a hassle to get working (and even harder if you have more than one box to check), but once you're over those hurdles, it's quite a good service.

You can get to the Red Hat Network site via www.redhat.com.

Good luck!

Jason

goodness0001
02-13-2002, 03:13 AM
it appears that is a paid services...is that correct?

JayPee
02-13-2002, 03:24 AM
Hey!

I believe there's a free version where you can manage a single box. You can add multiple boxes to your profile, but only one can be "entitled" to the service at a time - that's where the difficulty of more-than-one-box comes in.

See the "Basic" subscription overview at:

https://rhn.redhat.com/help/basic/intro.html


Jason

priyadi
02-13-2002, 07:28 AM
I wouldn't rely on rhn without any service guarantee (i.e. without paying them), as they can stop offering the free service any time.

I think it is better if you read the security advisories by yourself, it contains instructions on how you can upgrade the packages manually.

allan
02-13-2002, 09:27 AM
Even without using the up2date script, the RHN is a great resource, as is the Red Hat security advisories mailing list.

mlx
02-13-2002, 10:36 AM
Just regularly visit https://www.redhat.com/apps/support/errata/

All security updates are posted there.

priyadi
02-13-2002, 05:27 PM
Originally posted by uuallan
Even without using the up2date script, the RHN is a great resource, as is the Red Hat security advisories mailing list.

The RedHat security advisories mailing list seems to lag in sending their mails. I have a few cases when I received an email announcement days after they issued the advisory. Sometimes the email didn't even reach my mailbox, if they ever sent it. :( I tend to rely on other sources like linuxtoday.com or freshmeat.net for security advisories.

allan
02-13-2002, 06:03 PM
Originally posted by priyadi

The RedHat security advisories mailing list seems to lag in sending their mails. I have a few cases when I received an email announcement days after they issued the advisory. Sometimes the email didn't even reach my mailbox, if they ever sent it. :( I tend to rely on other sources like linuxtoday.com or freshmeat.net for security advisories.

I haven't had the same lag problems with the RHN list -- but I agree in principal that you should not trust just one source. In addition to Red Hat I also use Linux Security: http://www.linuxsecurity.com/

RutRow
02-13-2002, 08:34 PM
I have been using http://freshmeat.net/projects/frpms/ for about a year now. It works quite well.