the following table recaps in one place recent updates and fixes for
many common app's.
although i saw no notification of arrival,
openresty-openssl[-devel]-1.0.2i-2 (from 2016.OCT.05)
are out with an internal link fix. this leaves the 1.0.2j
security update for CVE-2016-7052 (from 2016.SEP.26) still to come.
PLEASE NOTE: this CVE (crashing on CRL checking) only affects
1.0.2i and does not affect the newest openssl branch 1.1.0.
when referencing the table, infra, please note that my sites are
happily rooted (some might say "mired") in centos 6 linux 2.6.32
where i enjoy comfortable sysV bliss. however, all of these updates
should be available in all distro versions not just the RHEL family.
- if you are using MariaDB's 10.0 branch, you may have to do a
specific 'install' rather than 'update' when using 'yum' for
anything in the 10.1 branch; and
- the 'bind' listed is from a competent but little known RHEL
rpm repo that moves much faster than others. although the bare
'bind' can be found in some FC repo's, usb0 gives one the full
bore (including debug if you want it). of course, one can
self-compile from the source available on isc.org. currently,
there are two (2) problems you might experience using this repo:
- they use the epoch '39' which might be confusing since it is
a large jump from where some others using epoch-numbering have
left off;
- their current rpm is for isc's 9.10.4-P1 (from 2016.APR.17
and essentially addressing some windows problems; however, the
base 9.10.4 branch addressed a bunch of universal CVE's) and i
have suggested they update to -P3 (from 2016.SEP.27) which
fixes CVE-2016-2775/-2776 plus ECS problems (i will update
this list when it is out); and
- while NOT a problem, the newest version from isc.org
is actually 9.11 and it has some new features -- but the
bug-fix level is the same as 9.10.4-[P]3 -- with
rpm-availability not likely soon.
--
Thank you,
Johann
| APP |
VERSION |
RPM REPO |
| MariaDB-cassandra-engine |
10.1.18-1 |
mariadb |
| MariaDB-client |
10.1.18-1 |
mariadb |
| MariaDB-common |
10.1.18-1 |
mariadb |
| MariaDB-compat |
10.1.18-1 |
mariadb |
| MariaDB-connect-engine |
10.1.18-1 |
mariadb |
| MariaDB-devel |
10.1.18-1 |
mariadb |
| MariaDB-gssapi-client |
10.1.18-1 |
mariadb |
| MariaDB-oqgraph-engine |
10.1.18-1 |
mariadb |
| MariaDB-server |
10.1.18-1 |
mariadb |
| MariaDB-shared |
10.1.18-1 |
mariadb |
| MariaDB-test |
10.1.18-1 |
mariadb |
| bind |
39:9.10.4-1 |
usb0 |
| bind-chroot |
39:9.10.4-1 |
usb0 |
| bind-devel |
39:9.10.4-1 |
usb0 |
| bind-libs |
39:9.10.4-1 |
usb0 |
| bind-license |
39:9.10.4-1 |
usb0 |
| bind-utils |
39:9.10.4-1 |
usb0 |
| galera |
25.3.18-1 |
mariadb |
| grep |
2.20-5 |
updates |
| lftp |
4.0.9-6 |
updates |
| libtirpc |
0.2.1-11 |
updates |
| nodejs |
0.10.47-2 |
epel-testing |
| nodejs-devel |
0.10.47-2 |
epel-testing |
| openresty-openssl |
1.0.2i-2 |
openresty |
| openresty-openssl-devel |
1.0.2i-2 |
openresty |
| perl-Net-SSLeay |
1.35-10 |
updates |
| tzdata |
2016g-2 |
PUIAS_6_core_Updates |
| tzdata-java |
2016g-2 |
PUIAS_6_core_Updates |
| webmin |
1.820-1 |
Webmin |
|
|
|
| KERNEL (Ultra-stable) ONLY: |
| Installing: |
|
|
| kernel |
2.6.32-642.6.1 |
updates |
| kernel-devel |
2.6.32-642.6.1 |
updates |
| Updating: |
|
|
| kernel-firmware |
2.6.32-642.6.1 |
updates |
| kernel-headers |
2.6.32-642.6.1 |
updates |
|
Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature
