Just how good is CentOS on security patches?

Story: CentOS remains way behind in tracking RHEL, Scientific Linux does better, but Debian and Ubuntu deserve consideration, tooTotal Replies: 6
Author Content
Steven_Rosenber

Dec 13, 2011
3:59 PM EDT 		I don't run CentOS at the moment, but I know many of you do. I read that the project is way behind RHEL when it comes to releases, but how far behind is CentOS when it comes to applying security patches that the upstream RHEL has pushed to its paid users?
number6x

Dec 13, 2011
4:30 PM EDT 		Their fac says 72 hours for security updates, longer for bug fixes. http://wiki.centos.org/FAQ/General#head-cea9337e6513cc1567c4...

penguinist

Dec 13, 2011
5:36 PM EDT 		Here are the repository time stamps from the last two kernel updates: 

RHEL: kernel-2.6.32-131.21.1.el6.x86_64 11/11/11 2:52:09 PM PST
  SL: kernel-2.6.32-131.21.1.el6.x86_64.rpm 22-Nov-2011 16:49   
  Ce: kernel-2.6.32-131.21.1.el6.x86_64.rpm 07-Dec-2011 13:28   
 
RHEL: kernel-2.6.32-131.17.1.el6.x86_64 9/29/11 12:26:44 PM PDT
  SL: kernel-2.6.32-131.17.1.el6.x86_64.rpm 06-Oct-2011 09:17   
  Ce: kernel-2.6.32-131.17.1.el6.x86_64.rpm 14-Oct-2011 17:34
Looks like Scientific Linux is beating Centos with security updates by nearly two weeks, but neither of them is getting close to a 72 hour standard.
number6x

Dec 13, 2011
5:52 PM EDT 		Were these security updates or just normal updates? I think the 72 Hrs is just for security.
penguinist

Dec 13, 2011
11:44 PM EDT 		Both of these kernel updates were classified by RedHat as security updates with a classification of "Important".
number6x

Dec 14, 2011
12:38 PM EDT 		So now Steven has his answer. They say 72 Hours, but it's really 'whenever'.

Thanks @penguinist!
Steven_Rosenber

Dec 15, 2011
12:10 AM EDT 		Thank you for playing, everybody.

Posting in this forum is limited to members of the group: [ForumMods, SITEADMINS, MEMBERS.]

Becoming a member of LXer is easy and free. Join Us!