CentOS - Nov 2016 - CentOS 6.3 packages updates options without upgrading.

Hi,
IT seems, centos6.3 does no longer get any updates esp security fixes as
per readme here:
http://mirror.centos.org/centos/6.3/readme

Is there updated source RPMs that can be rebuilt and hand patched, for
example, nss-util 3.21.0-2 or openssl 1.0.1e that can be safely used on
CentOS 6.3? Any other options that you can shed some light on, highly
appreciated for above examples.  My apologies if this is not the right
group to post such questions or if any existing literature available for
same, please kindly refer to right place.

The other option is to use CentOS 6.8 updated package on 6.3, but I am not
sure of any upstream and downstream dependencies in 6.3 without updating
the rest of the userland from 6.3 to 6.8.  Nonetheless, would this option
be feasible?

Appreciated very much, Thank you.

On Nov 7, 2016, at 9:03 PM, Dipal Bhatt <dipal.bhatt at gmail.com>
wrote:
> Hi,
> IT seems, centos6.3 does no longer get any updates esp security fixes as
> per readme here:
> http://mirror.centos.org/centos/6.3/readme
<http://mirror.centos.org/centos/6.3/readme>
I believe there?s some confusion about how CentOS release versions work.

You should read this FAQ entry:

https://wiki.centos.org/FAQ/General#head-dcca41e9a3d5ac4c6d900a991990fd11930867d6
<https://wiki.centos.org/FAQ/General#head-dcca41e9a3d5ac4c6d900a991990fd11930867d6>

Basically, there is no supported CentOS 6.3 release.  Only a CentOS 6, with
updates continuously released throughout its lifetime.  Just because you used
the installation media for CentOS 6.3 doesn?t mean that you will stay with it
forever.  You should change your repos to use /6/ and update to the latest
release.  There?s no other supported release of CentOS 6.

Your system is horribly out of date and vulnerable to many MANY security
vulnerabilities, both remote and local.

Red Hat supported the EUS release of 6.3.z but even that ceased getting updates
a while ago, I believe.  I?m sure if you pay them enough money, they?d be
willing to backport updates to 6.3.

--
Jonathan Billings <billings at negate.org>

On 11/7/2016 6:03 PM, Dipal Bhatt wrote:
> The other option is to use CentOS 6.8 updated package on 6.3, but I am not
> sure of any upstream and downstream dependencies in 6.3 without updating
> the rest of the userland from 6.3 to 6.8.  Nonetheless, would this option
> be feasible?
     yum update

will bring the system up to the latest 6 with all updates, currently 
that's 6.8 + assorted updates.

the dot releases of centos, like 6.3, 6.8, are just quarterly(?) rollups 
where they put out a new ISO with all updates to that point.



-- 
john r pierce, recycling bits in santa cruz