Re: [CentOS] gnutls bug

2014-03-07 Thread Michael Coffman
On Fri, Mar 7, 2014 at 9:55 AM, Lamar Owen wrote: > On 03/05/2014 06:36 PM, Michael Coffman wrote: > > Not sure what your environment looks like but the systems I manage are > > locked down and it's typically difficult to get them changed. We have > > hundreds of systems ( desktop, server and H

Re: [CentOS] gnutls bug

2014-03-07 Thread Lamar Owen
On 03/07/2014 11:57 AM, m.r...@5-cent.us wrote: > Lamar Owen wrote: >> I'm using CentOS myself, but if you need that particular feature of SL >> it may be the better choice for you. > Have you used yum-plugin-security? > > Why yes, yes I have. It is not equivalent to the SL versioning for the

Re: [CentOS] gnutls bug

2014-03-07 Thread m . roth
Lamar Owen wrote: > On 03/05/2014 06:36 PM, Michael Coffman wrote: >> Not sure what your environment looks like but the systems I manage are >> locked down and it's typically difficult to get them changed. We have >> hundreds of systems ( desktop, server and HPC systems) that are all the >> same

Re: [CentOS] gnutls bug

2014-03-07 Thread Lamar Owen
On 03/05/2014 06:36 PM, Michael Coffman wrote: > Not sure what your environment looks like but the systems I manage are > locked down and it's typically difficult to get them changed. We have > hundreds of systems ( desktop, server and HPC systems) that are all the > same rev with all the same pa

Re: [CentOS] gnutls bug

2014-03-06 Thread m . roth
Les Mikesell wrote: > On Thu, Mar 6, 2014 at 12:57 AM, Cliff Pratt > wrote: >> I have some sympathy for Michael. There are organisations which are so >> paranoid that they will not allow updates between eg 6.4 and 6.5, either >> because they insist on rigorous (ie lengthy and time consuming) >> re

Re: [CentOS] gnutls bug

2014-03-06 Thread Johnny Hughes
On 03/05/2014 03:19 PM, Michael Coffman wrote: > I am running centos6.4. Where do I find the updated gnutls packages?I > see the updated source file here: > http://vault.centos.org/6.5/updates/Source/SPackages/ > > But I don't see the correct version of the packages in the 6.4 tree here: > ht

Re: [CentOS] gnutls bug

2014-03-06 Thread Bart Schaefer
On Thu, Mar 6, 2014 at 7:46 AM, Les Mikesell wrote: > On Wed, Mar 5, 2014 at 10:01 PM, Bart Schaefer > wrote: >> rpm -e --test gnutls.i386 gnutls.x86_64 >> >> This will tell you what other packages depend on the gnutls library. > > Wouldn't 'yum remove gnutls' be a better check since it will walk

Re: [CentOS] gnutls bug

2014-03-06 Thread Les Mikesell
On Thu, Mar 6, 2014 at 12:57 AM, Cliff Pratt wrote: > I have some sympathy for Michael. There are organisations which are so > paranoid that they will not allow updates between eg 6.4 and 6.5, either > because they insist on rigorous (ie lengthy and time consuming) regression > testing of applicat

Re: [CentOS] gnutls bug

2014-03-06 Thread Les Mikesell
On Wed, Mar 5, 2014 at 10:01 PM, Bart Schaefer wrote: > Before you update anything, I suggest you run > > rpm -e --test gnutls > > If this complains about "refers to more than one package" then use > > rpm -e --test gnutls.i386 gnutls.x86_64 > > This will tell you what other packages depend on the

Re: [CentOS] gnutls bug

2014-03-06 Thread Michael Coffman
Thanks for all the thoughtful responses. I have learned a couple of things. On Thu, Mar 6, 2014 at 7:26 AM, Leon Fauster wrote: > Am 06.03.2014 um 01:00 schrieb Michael Coffman < > michael.coff...@avagotech.com>: > > On Wed, Mar 5, 2014 at 4:44 PM, John R Pierce > wrote: > > > >> On 3/5/20

Re: [CentOS] gnutls bug

2014-03-06 Thread Leon Fauster
Am 06.03.2014 um 01:00 schrieb Michael Coffman : > On Wed, Mar 5, 2014 at 4:44 PM, John R Pierce wrote: > >> On 3/5/2014 3:36 PM, Michael Coffman wrote: >>> Not sure what your environment looks like but the systems I manage are >>> locked down and it's typically difficult to get them changed. W

Re: [CentOS] gnutls bug

2014-03-06 Thread Rejy M Cyriac
On 03/06/2014 12:27 PM, Cliff Pratt wrote: > I have some sympathy for Michael. There are organisations which are so > paranoid that they will not allow updates between eg 6.4 and 6.5, either > because they insist on rigorous (ie lengthy and time consuming) regression > testing of applications or be

Re: [CentOS] gnutls bug

2014-03-05 Thread Cliff Pratt
I have some sympathy for Michael. There are organisations which are so paranoid that they will not allow updates between eg 6.4 and 6.5, either because they insist on rigorous (ie lengthy and time consuming) regression testing of applications or because a third party package vendor specifies a part

Re: [CentOS] gnutls bug

2014-03-05 Thread Bart Schaefer
Before you update anything, I suggest you run rpm -e --test gnutls If this complains about "refers to more than one package" then use rpm -e --test gnutls.i386 gnutls.x86_64 This will tell you what other packages depend on the gnutls library. It's probably fewer than you think, because RHEL/Cen

Re: [CentOS] gnutls bug

2014-03-05 Thread Les Mikesell
On Wed, Mar 5, 2014 at 6:43 PM, Stephen Harris wrote: >> >> No, what everyone has said is that there _are_ updates, and yum knows >> how to get them, even selectively. > > More to the point, "6.4" and "6.5" are just markers in the sand for > "CentOS 6". 6.5 is basically just a rebasing of the pac

Re: [CentOS] gnutls bug

2014-03-05 Thread David C. Miller
- Original Message - > From: "Stephen Harris" > To: "CentOS mailing list" > Sent: Wednesday, March 5, 2014 4:43:37 PM > Subject: Re: [CentOS] gnutls bug > > On Wed, Mar 05, 2014 at 06:12:49PM -0600, Les Mikesell wrote: > > On Wed, Mar 5, 20

Re: [CentOS] gnutls bug

2014-03-05 Thread Stephen Harris
On Wed, Mar 05, 2014 at 06:12:49PM -0600, Les Mikesell wrote: > On Wed, Mar 5, 2014 at 6:00 PM, Michael Coffman > > updated. I did not realize that once the OS was vaulted, there were no > > more updates. Now I know so thanks... > > No, what everyone has said is that there _are_ updates, and yu

Re: [CentOS] gnutls bug

2014-03-05 Thread Les Mikesell
On Wed, Mar 5, 2014 at 6:00 PM, Michael Coffman wrote: >>> >> so you're a year behind on any security fixes why are you worried >> about this one, then? >> > > > This seems like it has more potentiol to impact users in my environment > that are using a web browser to access sites outside our f

Re: [CentOS] gnutls bug

2014-03-05 Thread Michael Coffman
On Wed, Mar 5, 2014 at 4:44 PM, John R Pierce wrote: > On 3/5/2014 3:36 PM, Michael Coffman wrote: > > Not sure what your environment looks like but the systems I manage are > > locked down and it's typically difficult to get them changed. We have > > hundreds of systems ( desktop, server and H

Re: [CentOS] gnutls bug

2014-03-05 Thread John R Pierce
On 3/5/2014 3:36 PM, Michael Coffman wrote: > Not sure what your environment looks like but the systems I manage are > locked down and it's typically difficult to get them changed. We have > hundreds of systems ( desktop, server and HPC systems) that are all the > same rev with all the same packa

Re: [CentOS] gnutls bug

2014-03-05 Thread Michael Coffman
Not sure what your environment looks like but the systems I manage are locked down and it's typically difficult to get them changed. We have hundreds of systems ( desktop, server and HPC systems) that are all the same rev with all the same packages. A large number of vendor packages and interna

Re: [CentOS] gnutls bug

2014-03-05 Thread Les Mikesell
On Wed, Mar 5, 2014 at 5:22 PM, Michael Coffman wrote: > Thanks for the helpful replies. Guess I'll build it myself. Why? 'yum update gnutls' will get it, bringing along only things specified as having version-specific dependencies if there are any. But it is generally a bad idea to let the res

Re: [CentOS] gnutls bug

2014-03-05 Thread John R Pierce
On 3/5/2014 3:22 PM, Michael Coffman wrote: > Thanks for the helpful replies. Guess I'll build it myself. what? why??? yum update gnutls *done* -- john r pierce 37N 122W somewhere on the middle of the left coast __

Re: [CentOS] gnutls bug

2014-03-05 Thread Michael Coffman
Thanks for the helpful replies. Guess I'll build it myself. On Wed, Mar 5, 2014 at 2:38 PM, Dennis Jacobfeuerborn wrote: > On 05.03.2014 22:19, Michael Coffman wrote: > > I am running centos6.4. Where do I find the updated gnutls packages? > I > > see the updated source file here: > > htt

Re: [CentOS] gnutls bug

2014-03-05 Thread Dennis Jacobfeuerborn
On 05.03.2014 22:19, Michael Coffman wrote: > I am running centos6.4. Where do I find the updated gnutls packages?I > see the updated source file here: > http://vault.centos.org/6.5/updates/Source/SPackages/ > > But I don't see the correct version of the packages in the 6.4 tree here: > http:

Re: [CentOS] gnutls bug

2014-03-05 Thread John R Pierce
On 3/5/2014 1:19 PM, Michael Coffman wrote: > I am running centos6.4. Where do I find the updated gnutls packages?I > see the updated source file here: > http://vault.centos.org/6.5/updates/Source/SPackages/ > > But I don't see the correct version of the packages in the 6.4 tree here: > http:

Re: [CentOS] gnutls bug

2014-03-05 Thread Frank Cox
On Wed, 5 Mar 2014 14:19:26 -0700 Michael Coffman wrote: > Where should I be looking for the updated package for 6.4? "yum update" should bring your system up to the current Centos release which includes the gnutls fix. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com _

Re: [CentOS] gnutls bug

2014-03-05 Thread Peter
On 03/06/2014 10:19 AM, Michael Coffman wrote: > I am running centos6.4. Where do I find the updated gnutls packages?I > see the updated source file here: > http://vault.centos.org/6.5/updates/Source/SPackages/ > > But I don't see the correct version of the packages in the 6.4 tree here: > h