yum list-security no longer reports package as needing security update
Clash Royale CLAN TAG#URR8PPP
We have an audit system that, daily, tracks packages in need of a security update using:
yum list-security --security -q 2
For better or worse, some machines are not patched timely or missed, or are offline for some time. Many machines, to minimize possible issues, will just get security patches applied and this is where things go off the rails a bit.
It seems if there is a newer release of a package that is no longer attached to a security bulletin, packages are not getting updated, when doing a yum update-minimal --security
clamav-0.99.4-1.el7 - installed
clamav-0.100.2-2.el7 - yum list-security (around 11/2018):
clam-0.101.1-1.el7 - current available (not shown in yum list-security)
Am I missing something, or should yum list-security still show this as a package in need of a security update? Or is this just a limitation of how yum list-security works and our auditing is more correct than the package manager?
security yum
edited Feb 11 at 18:21
Jeff Schaller
42.9k1159137
asked Feb 11 at 18:15
Byron70Byron70
111
add a comment |
We have an audit system that, daily, tracks packages in need of a security update using:
yum list-security --security -q 2
For better or worse, some machines are not patched timely or missed, or are offline for some time. Many machines, to minimize possible issues, will just get security patches applied and this is where things go off the rails a bit.
It seems if there is a newer release of a package that is no longer attached to a security bulletin, packages are not getting updated, when doing a yum update-minimal --security
clamav-0.99.4-1.el7 - installed
clamav-0.100.2-2.el7 - yum list-security (around 11/2018):
clam-0.101.1-1.el7 - current available (not shown in yum list-security)
Am I missing something, or should yum list-security still show this as a package in need of a security update? Or is this just a limitation of how yum list-security works and our auditing is more correct than the package manager?
security yum
edited Feb 11 at 18:21
Jeff Schaller
42.9k1159137
asked Feb 11 at 18:15
Byron70Byron70
111
The man pages don't seem to have any info forlist-security, but it does have info on--securitywhich is what I have always used. Tryyum check-update --securityfor a list of packages that report they are security-related updates. Be warned, the output is quite extensive, but the summary at the end is the number of updates that comply with the--securityquery, out of the total available, and a list of the actual security updates in question.
– 0xSheepdog
Feb 11 at 22:14
add a comment |
We have an audit system that, daily, tracks packages in need of a security update using:
yum list-security --security -q 2
For better or worse, some machines are not patched timely or missed, or are offline for some time. Many machines, to minimize possible issues, will just get security patches applied and this is where things go off the rails a bit.
It seems if there is a newer release of a package that is no longer attached to a security bulletin, packages are not getting updated, when doing a yum update-minimal --security
clamav-0.99.4-1.el7 - installed
clamav-0.100.2-2.el7 - yum list-security (around 11/2018):
clam-0.101.1-1.el7 - current available (not shown in yum list-security)
Am I missing something, or should yum list-security still show this as a package in need of a security update? Or is this just a limitation of how yum list-security works and our auditing is more correct than the package manager?
security yum
edited Feb 11 at 18:21
Jeff Schaller
42.9k1159137
asked Feb 11 at 18:15
Byron70Byron70
111
We have an audit system that, daily, tracks packages in need of a security update using:
yum list-security --security -q 2
For better or worse, some machines are not patched timely or missed, or are offline for some time. Many machines, to minimize possible issues, will just get security patches applied and this is where things go off the rails a bit.
It seems if there is a newer release of a package that is no longer attached to a security bulletin, packages are not getting updated, when doing a yum update-minimal --security
clamav-0.99.4-1.el7 - installed
clamav-0.100.2-2.el7 - yum list-security (around 11/2018):
clam-0.101.1-1.el7 - current available (not shown in yum list-security)
Am I missing something, or should yum list-security still show this as a package in need of a security update? Or is this just a limitation of how yum list-security works and our auditing is more correct than the package manager?
security yum
security yum
edited Feb 11 at 18:21
Jeff Schaller
42.9k1159137
asked Feb 11 at 18:15
Byron70Byron70
111
edited Feb 11 at 18:21
Jeff Schaller
42.9k1159137
asked Feb 11 at 18:15
Byron70Byron70
111
edited Feb 11 at 18:21
Jeff Schaller
42.9k1159137
edited Feb 11 at 18:21
Jeff Schaller
42.9k1159137
edited Feb 11 at 18:21
Jeff Schaller
42.9k1159137
42.9k1159137
asked Feb 11 at 18:15
Byron70Byron70
111
asked Feb 11 at 18:15
Byron70Byron70
111
asked Feb 11 at 18:15
Byron70Byron70
111
111
The man pages don't seem to have any info forlist-security, but it does have info on--securitywhich is what I have always used. Tryyum check-update --securityfor a list of packages that report they are security-related updates. Be warned, the output is quite extensive, but the summary at the end is the number of updates that comply with the--securityquery, out of the total available, and a list of the actual security updates in question.
– 0xSheepdog
Feb 11 at 22:14
add a comment |
The man pages don't seem to have any info forlist-security, but it does have info on--securitywhich is what I have always used. Tryyum check-update --securityfor a list of packages that report they are security-related updates. Be warned, the output is quite extensive, but the summary at the end is the number of updates that comply with the--securityquery, out of the total available, and a list of the actual security updates in question.
– 0xSheepdog
Feb 11 at 22:14
The man pages don't seem to have any info for
list-security, but it does have info on --security which is what I have always used. Try yum check-update --security for a list of packages that report they are security-related updates. Be warned, the output is quite extensive, but the summary at the end is the number of updates that comply with the --security query, out of the total available, and a list of the actual security updates in question.– 0xSheepdog
Feb 11 at 22:14
The man pages don't seem to have any info for
list-security, but it does have info on --security which is what I have always used. Try yum check-update --security for a list of packages that report they are security-related updates. Be warned, the output is quite extensive, but the summary at the end is the number of updates that comply with the --security query, out of the total available, and a list of the actual security updates in question.– 0xSheepdog
Feb 11 at 22:14
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "106"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f500003%2fyum-list-security-no-longer-reports-package-as-needing-security-update%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Unix & Linux Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f500003%2fyum-list-security-no-longer-reports-package-as-needing-security-update%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
The man pages don't seem to have any info for
list-security, but it does have info on--securitywhich is what I have always used. Tryyum check-update --securityfor a list of packages that report they are security-related updates. Be warned, the output is quite extensive, but the summary at the end is the number of updates that comply with the--securityquery, out of the total available, and a list of the actual security updates in question.– 0xSheepdog
Feb 11 at 22:14