Hello, Specifically this is in reference to RHSA-2017:2483, which should increment the httpd24 packages to 25-9 in the SCL. The SA was released on August 16th 2017, so it has some age to it, but there's no corresponding CESA on it and the SCL for 6 still sits at the previous, 25-8. Some links for reference: https://access.redhat.com/errata/RHSA-2017:2483 Online repo: http://mirror.centos.org/centos/6/sclo/x86_64/rh/httpd24/ Has this packaged reached its end of updates in this repo? It's a good set of CVEs at 70+ days now. Additionally, and while I don't expect this to be in the CentOS repo yet due to its young age, there's another update to httpd24 that was just released four days ago, RHSA-2017:3018. Looking for insight, or my own self initiated face palm because I'm missing something. Thanks!
On 10/28/2017 03:57 PM, Eric wrote:> Hello, > > Specifically this is in reference to RHSA-2017:2483, which should increment > the httpd24 packages to 25-9 in the SCL. The SA was released on August > 16th 2017, so it has some age to it, but there's no corresponding CESA on > it and the SCL for 6 still sits at the previous, 25-8. > > Some links for reference: > https://access.redhat.com/errata/RHSA-2017:2483 > > Online repo: > http://mirror.centos.org/centos/6/sclo/x86_64/rh/httpd24/ > > Has this packaged reached its end of updates in this repo? It's a good set > of CVEs at 70+ days now. > > Additionally, and while I don't expect this to be in the CentOS repo yet > due to its young age, there's another update to httpd24 that was just > released four days ago, RHSA-2017:3018. > > Looking for insight, or my own self initiated face palm because I'm missing > something. >We do not release official CentOS CESAs for SIG content. As to why that has not been released, or if it will be, the SIG will have to answer that. -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 198 bytes Desc: OpenPGP digital signature URL: <http://lists.centos.org/pipermail/centos/attachments/20171029/3cc22ed4/attachment-0001.sig>
On Sun, Oct 29, 2017 at 8:01 AM, Johnny Hughes <johnny at centos.org> wrote:> On 10/28/2017 03:57 PM, Eric wrote: > > Hello, > > > > Specifically this is in reference to RHSA-2017:2483, which should > increment > > the httpd24 packages to 25-9 in the SCL. The SA was released on August > > 16th 2017, so it has some age to it, but there's no corresponding CESA on > > it and the SCL for 6 still sits at the previous, 25-8. > > > > Some links for reference: > > https://access.redhat.com/errata/RHSA-2017:2483 > > > > Online repo: > > http://mirror.centos.org/centos/6/sclo/x86_64/rh/httpd24/ > > > > Has this packaged reached its end of updates in this repo? It's a good > set > > of CVEs at 70+ days now. > > > > Additionally, and while I don't expect this to be in the CentOS repo yet > > due to its young age, there's another update to httpd24 that was just > > released four days ago, RHSA-2017:3018. > > > > Looking for insight, or my own self initiated face palm because I'm > missing > > something. > > > > We do not release official CentOS CESAs for SIG content. > > As to why that has not been released, or if it will be, the SIG will > have to answer that. > > > _______________________________________________ > CentOS mailing list > CentOS at centos.org > https://lists.centos.org/mailman/listinfo/centos > >Thank you Johnny. Apologies, that comment right there makes me realize I should have directed this at the SCL SIG . I'll do that now.