Frank Liu
2021-Jan-27 18:00 UTC
[CentOS] CESA-2021:0221 Important CentOS 7 sudo Security Update
Hi, Is there a reason why the update is not tagged as "security"? yum --security update sudo ... --> sudo-1.8.23-10.el7_9.1.x86_64 from updates removed (updateinfo) --> sudo-1.8.23-9.el7.x86_64 from @base removed (updateinfo) No packages needed for security; 1 packages available ...
Jonathan Billings
2021-Jan-27 18:08 UTC
[CentOS] CESA-2021:0221 Important CentOS 7 sudo Security Update
On Wed, Jan 27, 2021 at 10:00:27AM -0800, Frank Liu wrote:> > Hi, > > Is there a reason why the update is not tagged as "security"? > > yum --security update sudo > ... > --> sudo-1.8.23-10.el7_9.1.x86_64 from updates removed (updateinfo) > --> sudo-1.8.23-9.el7.x86_64 from @base removed (updateinfo) > No packages needed for security; 1 packages availableThe CentOS repos have never included security metadata. yum-security is basically useless with the base CentOS repos (although they will pick up security repo metadata from EPEL if that is enabled). -- Jonathan Billings <billings at negate.org>