CentOS - May 2006 - Recent CentOS4 kernel updates and CentOS Plus

If it wouldn't be too much trouble ... when a kernel security update
notice is posted to the announcements list, would it be possible to
indicate whether the centosplus kernel is also susceptible to the
security issue being patched?

I'm running the plus kernel now, and find myself wondering whether I
will ever need to back off to the base kernel because of security
issues.

Or is it reliably the case that centosplus gets updated along with the
base kernel whenever necessary if the upstream has released a security
fix?

On Fri, 2006-05-26 at 08:18 -0700, Bart Schaefer wrote:
> If it wouldn't be too much trouble ... when a kernel security update
> notice is posted to the announcements list, would it be possible to
> indicate whether the centosplus kernel is also susceptible to the
> security issue being patched?
> 
> I'm running the plus kernel now, and find myself wondering whether I
> will ever need to back off to the base kernel because of security
> issues.
> 
> Or is it reliably the case that centosplus gets updated along with the
> base kernel whenever necessary if the upstream has released a security
> fix?
In most instances, the CentOSPlus kernel will be affected if the main
kernel is affected.  That is almost always going to be the case.

I try to update the CentOSPlus kernel regularly after the main kernel
update.  But, the centosplus kernel requires much more testing than the
main kernel, as there are centos related patches and all the kernel
config files have to be validated.

I am working on the CentOSPlus kernel now (since I have finished all the
Extras drivers that need updating when the main kernel changes).

We should have the centosplus kernels out soon.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL:
<http://lists.centos.org/pipermail/centos/attachments/20060526/8eabe1f8/attachment-0002.sig>

Bart Schaefer wrote:
> 
> Or is it reliably the case that centosplus gets updated along with the
> base kernel whenever necessary if the upstream has released a security
> fix?
The CentOS plus kernel will get updated everytime the upstream kernel is
updated, usually within a few days time ( we aim to turnaround within a
few days. )

-- 
Karanbir Singh : http://www.karan.org/ : 2522219 at icq

On 5/26/06, Bart Schaefer <barton.schaefer at gmail.com>
wrote:
> If it wouldn't be too much trouble ... when a kernel security update
> notice is posted to the announcements list, would it be possible to
> indicate whether the centosplus kernel is also susceptible to the
> security issue being patched?
Anything that affects the base kernel will inherently be in the
centosplus kernel, as the centosplus kernel is everything that the
base kernel is, plus a few more options. The plus kernel should be
updated within a day or two of the base kernel update.

-- 
This message has been double ROT13 encoded for security. Anyone other
than the intended recipient attempting to decode this message will be
in violation of the DMCA