Hello all,
I have a system which I want to keep stable and relatively untouched after installation. I don't want to do a general 'update'; instead I want to do something like 'update with security fixes only'.
I've looked around and can't find any (non-manual/non-expert) way to do this!
Wouldn't it be nice to just configure a 'security and critical bug fixes only' repository and just do a 'yum update' regularly (maybe there's a way to do this, but I couldn't find it)?
I'm sure other people have this requirement: how do you do it easily (ie without much maual labor)?
Thanks in advance for any help
- Mary.
Results 1 to 15 of 23
-
19th August 2007, 10:40 PM #1MaryStern Guest
How do I keep a system up to date with ONLY security patches?
-
19th August 2007, 10:46 PM #2leigh123linux Guest
try
Code:su - yum install yum-security
and to update security fixes only use this command
Code:su - yum --security update
Code:[root@localhost ~]# yum --security update Loading "downloadonly" plugin Loading "tsflags" plugin Loading "changelog" plugin Loading "presto" plugin Loading "allowdowngrade" plugin Loading "security" plugin Loading "protectbase" plugin Setting up Update Process Setting up Presto Reading Presto metadata in from local files Reducing Fedora Core 7 - i386 to included packages only Finished Reducing Livna for Fedora Core 7 - i386 - Base to included packages only Finished Reducing Fedora Core 7 - i386 - Updates to included packages only Finished 70 packages excluded due to repository protections Resolving Dependencies Limiting packages to security relevant ones No packages needed, for security, 10 available --> Running transaction check --> Running transaction check [root@localhost ~]# yum check-update Loading "downloadonly" plugin Loading "tsflags" plugin Loading "changelog" plugin Loading "presto" plugin Loading "allowdowngrade" plugin Loading "security" plugin Loading "protectbase" plugin Setting up Presto Reading Presto metadata in from local files Reducing Fedora Core 7 - i386 to included packages only Finished Reducing Livna for Fedora Core 7 - i386 - Base to included packages only Finished Reducing Fedora Core 7 - i386 - Updates to included packages only Finished Skipping security plugin, no data 70 packages excluded due to repository protections libvolume_id.i386 113-11.fc7 updates libvolume_id.x86_64 113-11.fc7 updates libvolume_id-devel.x86_64 113-11.fc7 updates libvolume_id-devel.i386 113-11.fc7 updates udev.x86_64 113-11.fc7 updates [root@localhost ~]#
Last edited by leigh123linux; 19th August 2007 at 10:52 PM.
-
19th August 2007, 11:26 PM #3MaryStern Guest
wow how easy is that!..if only it were a bit easier to find out (maybe that should be in the FAQ?)
I'll try that now, thanks very much for your super-quick and excellent help!!
P.S. is there something similar for 'critical bug fixes'?
-
23rd August 2007, 03:45 PM #4leigh123linux GuestI found the plugin when doing a "yum list yum*" and decided to install it .
Originally Posted by eureka.trek
-
23rd August 2007, 10:29 PM #5
Registered User
- Join Date
- Feb 2007
- Location
- European Union - Romania, Bucharest
- Posts
- 283
- Mentioned
- 0 Post(s)
- Tagged
- 0 Thread(s)
maybe you did a "yum search yum" because "yum list yum*" lists currently installed yum packages. anyways thanks for the info.
one more question: what exactly is defined as security fix?
-
23rd August 2007, 10:54 PM #6leigh123linux GuestNo I did a Originally Posted by gala_dragos
yum list yum*
as it lists installed as well as available packages
Code:[leigh@localhost ~]$ yum list yum* Loading "downloadonly" plugin Loading "tsflags" plugin Loading "changelog" plugin Loading "presto" plugin Loading "allowdowngrade" plugin Loading "security" plugin Loading "protectbase" plugin Setting up Presto Reading Presto metadata in from local files Reducing Fedora Core 7 - i386 to included packages only Finished Reducing Livna for Fedora Core 7 - i386 - Base to included packages only Finished Reducing Fedora Core 7 - i386 - Updates to included packages only Finished 73 packages excluded due to repository protections Installed Packages yum.noarch 3.2.3-1.fc7 installed yum-allowdowngrade.noarch 1.1.6-1.fc7 installed yum-changelog.noarch 1.1.6-1.fc7 installed yum-downloadonly.noarch 1.1.6-1.fc7 installed yum-metadata-parser.x86_64 1.1.1-1.fc7 installed yum-presto.noarch 0.3.10-1.fc7 installed yum-protectbase.noarch 1.1.6-1.fc7 installed yum-security.noarch 1.1.6-1.fc7 installed yum-tsflags.noarch 1.1.6-1.fc7 installed yum-utils.noarch 1.1.6-1.fc7 installed Available Packages yum.noarch 3.2.2-1.fc7 updates yum-arch.noarch 2.2.2-2.fc7 fedora yum-fastestmirror.noarch 1.1.6-1.fc7 updates yum-fedorakmod.noarch 1.1.6-1.fc7 updates yum-kernel-module.noarch 1.1.6-1.fc7 updates yum-merge-conf.noarch 1.1.6-1.fc7 updates yum-metadata-parser.x86_64 1.1.0-2.fc7 fedora yum-priorities.noarch 1.1.6-1.fc7 updates yum-protect-packages.noarch 1.1.6-1.fc7 updates yum-refresh-updatesd.noarch 1.1.6-1.fc7 updates yum-skip-broken.noarch 1.1.6-1.fc7 updates yum-updateonboot.noarch 1.1.6-1.fc7 updates yum-updatesd.noarch 3.2.2-1.fc7 updates yum-versionlock.noarch 1.1.6-1.fc7 updates yumex.noarch 1.9.11-1.fc7 updates [leigh@localhost ~]$
-
25th August 2007, 07:17 PM #7
Registered User
- Join Date
- Jun 2007
- Location
- Poland
- Posts
- 249
- Mentioned
- 0 Post(s)
- Tagged
- 0 Thread(s)
I think it doesn't work
Strange results.[root@localhost fedora]# yum --security update
Loading "installonlyn" plugin
Loading "presto" plugin
Loading "security" plugin
Setting up Presto
Reading Presto metadata in from local files
Setting up Update Process
Resolving Dependencies
Limiting packages to security relevant ones
No packages needed, for security, 530 available
--> Running transaction check
--> Running transaction check
[root@localhost fedora]# yum --security check-update
Loading "installonlyn" plugin
Loading "presto" plugin
Loading "security" plugin
Setting up Presto
Reading Presto metadata in from local files
Limiting package lists to security relevant ones
No packages needed, for security, 265 available
openssl.i386 0.9.8b-14.fc7 updates
[root@localhost fedora]#
-
25th August 2007, 07:19 PM #8leigh123linux Guest Originally Posted by a_small_cake
I think it doesn't work
Strange results.
Perhaps none of them are security fixes !! ( I have noticed that the packages needed is doubled sometimes
)
Code:[root@localhost ~]# yum --security update Loading "downloadonly" plugin Loading "tsflags" plugin Loading "changelog" plugin Loading "presto" plugin Loading "allowdowngrade" plugin Loading "security" plugin Loading "protectbase" plugin Setting up Presto core-32bit 100% |=========================| 2.1 kB 00:00 livna 100% |=========================| 383 B 00:00 fedora 100% |=========================| 2.1 kB 00:00 livna-32bit 100% |=========================| 383 B 00:00 updates 100% |=========================| 383 B 00:00 freshrpms 100% |=========================| 1.9 kB 00:00 updates-32bit 100% |=========================| 383 B 00:00 Reading Presto metadata in from local files presto.xml.gz 100% |=========================| 7.4 kB 00:00 presto.xml.gz 100% |=========================| 16 kB 00:00 livna 100% |=========================| 2.1 kB 00:00 primary.sqlite.bz2 100% |=========================| 132 kB 00:00 livna-32bit 100% |=========================| 2.1 kB 00:00 primary.sqlite.bz2 100% |=========================| 141 kB 00:00 updates 100% |=========================| 1.9 kB 00:00 updates-32bit 100% |=========================| 1.9 kB 00:00 Reducing Fedora Core 7 - i386 to included packages only Finished Reducing Livna for Fedora Core 7 - i386 - Base to included packages only Finished Reducing Fedora Core 7 - i386 - Updates to included packages only Finished 73 packages excluded due to repository protections Setting up Update Process Resolving Dependencies Limiting packages to security relevant ones No packages needed, for security, 10 available [root@localhost ~]# yum check-update Loading "downloadonly" plugin Loading "tsflags" plugin Loading "changelog" plugin Loading "presto" plugin Loading "allowdowngrade" plugin Loading "security" plugin Loading "protectbase" plugin Setting up Presto Reading Presto metadata in from local files Reducing Fedora Core 7 - i386 to included packages only Finished Reducing Livna for Fedora Core 7 - i386 - Base to included packages only Finished Reducing Fedora Core 7 - i386 - Updates to included packages only Finished Skipping security plugin, no data 73 packages excluded due to repository protections kernel.x86_64 2.6.22.4-65.fc7 updates kernel-devel.x86_64 2.6.22.4-65.fc7 updates kernel-headers.x86_64 2.6.22.4-65.fc7 updates kmod-nvidia.x86_64 100.14.11-1.2.6.22.4_6 livna livna-config-display.noarch 0.0.17-1.lvn7 livna [root@localhost ~]#
Last edited by leigh123linux; 25th August 2007 at 07:23 PM.
-
25th August 2007, 07:26 PM #9
Registered User
- Join Date
- Jun 2007
- Location
- Poland
- Posts
- 249
- Mentioned
- 0 Post(s)
- Tagged
- 0 Thread(s)
In fresh installation? :P Originally Posted by leigh123@linux
-
25th August 2007, 07:45 PM #10
Registered User
- Join Date
- Feb 2007
- Location
- European Union - Romania, Bucharest
- Posts
- 283
- Mentioned
- 0 Post(s)
- Tagged
- 0 Thread(s)
Define "security fixes" please.
-
30th August 2007, 03:51 AM #11
Registered User
- Join Date
- Jul 2005
- Posts
- 320
- Mentioned
- 0 Post(s)
- Tagged
- 0 Thread(s)
I'm a little confused too. According to the Fedora Weekly News there are several 'security' fixes for F7 this week. Yet my yum complains none are needed.
I have the following packages installed that are listed as having security updates. Why wouldn't they be updated? Is the security threat non severe enough?Code:[root@localhost ~]# yum --security update Loading "protectbase" plugin Loading "security" plugin Loading "presto" plugin Setting up Update Process Setting up Presto Reading Presto metadata in from local files Excluding Packages in global exclude list Finished 0 packages excluded due to repository protections Resolving Dependencies Limiting packages to security relevant ones No packages needed, for security, 112 available --> Running transaction check --> Running transaction check
kdelibs-3.5.7-9.fc7
kdebase-3.5.7-0.1.fc7
id3lib-3.8.3-15.fc7
kernel-2.6.22.1-41.fc7
The KDE updates fixes address URL spoofing.
-
30th August 2007, 09:08 AM #12
Registered User
- Join Date
- Jun 2007
- Location
- Poland
- Posts
- 249
- Mentioned
- 0 Post(s)
- Tagged
- 0 Thread(s)
IMHO this --security plugin doesn't work, just check what you need from Fedora security site and update it using your Package Manager. Originally Posted by linux_paul
-
31st August 2007, 04:25 AM #13
Registered User
- Join Date
- Jul 2005
- Posts
- 320
- Mentioned
- 0 Post(s)
- Tagged
- 0 Thread(s)
Thats what I was afraid of. Too bad... it could have been useful.
-
31st August 2007, 08:48 AM #14
Registered User
- Join Date
- Feb 2007
- Location
- European Union - Romania, Bucharest
- Posts
- 283
- Mentioned
- 0 Post(s)
- Tagged
- 0 Thread(s)
The plugin works, but I think that you must set a policy of some kind to define what to be signaled as security fixes. same goes for defining packages as updates in yum. Unfortunately I don't know much about how yum will distinguish an security update from an normal update. Maybe someone more experienced can help.
-
31st August 2007, 08:55 AM #15
Registered User
- Join Date
- Feb 2007
- Location
- European Union - Romania, Bucharest
- Posts
- 283
- Mentioned
- 0 Post(s)
- Tagged
- 0 Thread(s)
I also think that for a security fix to show up in yum it must be present on more than half of the fedora mirrors. A new kernel was available since two weeks ago, but it only showed as an update two day ago.
Reply With Quote
Similar Threads
-
cannot up date the system
By jcwolff in forum Using FedoraReplies: 7Last Post: 14th December 2008, 11:19 AM -
Firefox security patches controversy?
By imdeemvp in forum Fedora FocusReplies: 12Last Post: 24th July 2005, 07:10 AM -
Security Patches
By masteq in forum EOL (End Of Life) VersionsReplies: 8Last Post: 27th March 2004, 08:41 PM -
Where will security errata and patches be available?
By rsr in forum Using FedoraReplies: 3Last Post: 14th November 2003, 11:12 PM
Tags for this Thread
Posting Permissions
Google Authenticator verification provided by Two-Factor Authentication v1.1.0 (Free) - vBulletin Mods & Addons Copyright © 2026 DragonByte Technologies Ltd.