10

Last time I checked I was able to install yum-security in CentOS but since it doesn't use the official redhat mirrors I was unable to get it to actually work. Is there a way to make yum-security work or is there an alternative to yum-security on CentOS?

Improve this question
1

4 Answers 4

Reset to default
1

For Centos 6, Centos 7 and Centos 8 the easiest way is to use Steve Meier's Updateinfo: a yum repository with CentOS Errata information.

It's a ready yum repo served and updated by the author of the CEFS project.

It is a paid service but as of now it costs only a mere $3 per month for an unlimited number of servers (but using a mirror for a big fleet is recommended).


Note that it's the same thing as you can do yourself according to dsmsk80's answer here. But don't you prefer to support the enthusiast who made this solution possible instead? :)

Improve this answer
0

No, there is no easy alternative to this redhat feature with centos.

The only alternative I know so far is to manually list the rpms affected by one or more CVE and update only them.

Improve this answer
1
  • I am sorry but this is simply not true. For many years you could have used CEFS project and since 2017 you can use Updateinfo. See my answer for more info.
    – Greg Dubicki
    Oct 10, 2020 at 17:40
-1

Unfortunately, yum-security is not supported on CentOS :(

However, this hacked alternative might work for you.

Improve this answer
1
-1

These days yum-security works fine on CentOS, you can install it from EPEL

Example on CentOS 6:

$ rpm -q yum-plugin-security
yum-plugin-security-1.1.30-14.el6.noarch

(On CentOS 5 the package is called yum-security)

$ sudo yum update --security
Loaded plugins: security
Setting up Update Process
Resolving Dependencies
Limiting packages to security relevant ones
epel/updateinfo                                                                                                                                                                                                         | 724 kB     00:00     
No packages needed for security; 141 packages available
Improve this answer
3
  • 2
    This doesn't work for me. On CentOS 6, I installed httpd-2.2.15-29.el6.centos.x86_64.rpm , which has had several security updates such as CESA-2013:1156. yum update --security still says No packages needed for security. yum update will update httpd just fine. I'll note that yum-plugin-security does work on Scientific Linux.
    – Stefan Lasiewski
    May 14, 2014 at 20:19
  • I'm not sure what it's actually doing on the backend, because it does list some of the packages that need updating. Problem is it leaves other important packages that need updating out, so it gives a false sense of security. Which, arguably, is worse than if it simply reliably did nothing.
    – Parthian Shot
    Mar 30, 2016 at 14:18
  • 2
    The reason why this doesn't work is that CentOS doesn't publish which updates are security updates in its repo metadata. EPEL does, though, so occasionally you see an update via this process and may be misled into thinking that it is doing what you want.
    – Michael Hampton
    Oct 22, 2016 at 17:18

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .