Re: [CentOS] gnutls bug

2014-03-07 Thread Lamar Owen
On 03/05/2014 06:36 PM, Michael Coffman wrote: Not sure what your environment looks like but the systems I manage are locked down and it's typically difficult to get them changed. We have hundreds of systems ( desktop, server and HPC systems) that are all the same rev with all the same

Re: [CentOS] gnutls bug

2014-03-07 Thread m . roth
Lamar Owen wrote: On 03/05/2014 06:36 PM, Michael Coffman wrote: Not sure what your environment looks like but the systems I manage are locked down and it's typically difficult to get them changed. We have hundreds of systems ( desktop, server and HPC systems) that are all the same rev with

Re: [CentOS] gnutls bug

2014-03-07 Thread Lamar Owen
On 03/07/2014 11:57 AM, m.r...@5-cent.us wrote: Lamar Owen wrote: I'm using CentOS myself, but if you need that particular feature of SL it may be the better choice for you. Have you used yum-plugin-security? Why yes, yes I have. It is not equivalent to the SL versioning for the

Re: [CentOS] gnutls bug

2014-03-07 Thread Michael Coffman
On Fri, Mar 7, 2014 at 9:55 AM, Lamar Owen lo...@pari.edu wrote: On 03/05/2014 06:36 PM, Michael Coffman wrote: Not sure what your environment looks like but the systems I manage are locked down and it's typically difficult to get them changed. We have hundreds of systems ( desktop,

Re: [CentOS] gnutls bug

2014-03-06 Thread Rejy M Cyriac
On 03/06/2014 12:27 PM, Cliff Pratt wrote: I have some sympathy for Michael. There are organisations which are so paranoid that they will not allow updates between eg 6.4 and 6.5, either because they insist on rigorous (ie lengthy and time consuming) regression testing of applications or

Re: [CentOS] gnutls bug

2014-03-06 Thread Leon Fauster
Am 06.03.2014 um 01:00 schrieb Michael Coffman michael.coff...@avagotech.com: On Wed, Mar 5, 2014 at 4:44 PM, John R Pierce pie...@hogranch.com wrote: On 3/5/2014 3:36 PM, Michael Coffman wrote: Not sure what your environment looks like but the systems I manage are locked down and it's

Re: [CentOS] gnutls bug

2014-03-06 Thread Michael Coffman
Thanks for all the thoughtful responses. I have learned a couple of things. On Thu, Mar 6, 2014 at 7:26 AM, Leon Fauster leonfaus...@googlemail.comwrote: Am 06.03.2014 um 01:00 schrieb Michael Coffman michael.coff...@avagotech.com: On Wed, Mar 5, 2014 at 4:44 PM, John R Pierce

Re: [CentOS] gnutls bug

2014-03-06 Thread Les Mikesell
On Wed, Mar 5, 2014 at 10:01 PM, Bart Schaefer barton.schae...@gmail.com wrote: Before you update anything, I suggest you run rpm -e --test gnutls If this complains about refers to more than one package then use rpm -e --test gnutls.i386 gnutls.x86_64 This will tell you what other

Re: [CentOS] gnutls bug

2014-03-06 Thread Les Mikesell
On Thu, Mar 6, 2014 at 12:57 AM, Cliff Pratt enkiduonthe...@gmail.com wrote: I have some sympathy for Michael. There are organisations which are so paranoid that they will not allow updates between eg 6.4 and 6.5, either because they insist on rigorous (ie lengthy and time consuming) regression

Re: [CentOS] gnutls bug

2014-03-06 Thread Bart Schaefer
On Thu, Mar 6, 2014 at 7:46 AM, Les Mikesell lesmikes...@gmail.com wrote: On Wed, Mar 5, 2014 at 10:01 PM, Bart Schaefer barton.schae...@gmail.com wrote: rpm -e --test gnutls.i386 gnutls.x86_64 This will tell you what other packages depend on the gnutls library. Wouldn't 'yum remove gnutls'

Re: [CentOS] gnutls bug

2014-03-06 Thread Johnny Hughes
On 03/05/2014 03:19 PM, Michael Coffman wrote: I am running centos6.4. Where do I find the updated gnutls packages?I see the updated source file here: http://vault.centos.org/6.5/updates/Source/SPackages/ But I don't see the correct version of the packages in the 6.4 tree here:

Re: [CentOS] gnutls bug

2014-03-06 Thread m . roth
Les Mikesell wrote: On Thu, Mar 6, 2014 at 12:57 AM, Cliff Pratt enkiduonthe...@gmail.com wrote: I have some sympathy for Michael. There are organisations which are so paranoid that they will not allow updates between eg 6.4 and 6.5, either because they insist on rigorous (ie lengthy and time

[CentOS] gnutls bug

2014-03-05 Thread Michael Coffman
I am running centos6.4. Where do I find the updated gnutls packages?I see the updated source file here: http://vault.centos.org/6.5/updates/Source/SPackages/ But I don't see the correct version of the packages in the 6.4 tree here: http://vault.centos.org/6.4/updates/x86_64/Packages/ Where

Re: [CentOS] gnutls bug

2014-03-05 Thread Peter
On 03/06/2014 10:19 AM, Michael Coffman wrote: I am running centos6.4. Where do I find the updated gnutls packages?I see the updated source file here: http://vault.centos.org/6.5/updates/Source/SPackages/ But I don't see the correct version of the packages in the 6.4 tree here:

Re: [CentOS] gnutls bug

2014-03-05 Thread Frank Cox
On Wed, 5 Mar 2014 14:19:26 -0700 Michael Coffman wrote: Where should I be looking for the updated package for 6.4? yum update should bring your system up to the current Centos release which includes the gnutls fix. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

Re: [CentOS] gnutls bug

2014-03-05 Thread John R Pierce
On 3/5/2014 1:19 PM, Michael Coffman wrote: I am running centos6.4. Where do I find the updated gnutls packages?I see the updated source file here: http://vault.centos.org/6.5/updates/Source/SPackages/ But I don't see the correct version of the packages in the 6.4 tree here:

Re: [CentOS] gnutls bug

2014-03-05 Thread Dennis Jacobfeuerborn
On 05.03.2014 22:19, Michael Coffman wrote: I am running centos6.4. Where do I find the updated gnutls packages?I see the updated source file here: http://vault.centos.org/6.5/updates/Source/SPackages/ But I don't see the correct version of the packages in the 6.4 tree here:

Re: [CentOS] gnutls bug

2014-03-05 Thread Michael Coffman
Thanks for the helpful replies. Guess I'll build it myself. On Wed, Mar 5, 2014 at 2:38 PM, Dennis Jacobfeuerborn denni...@conversis.de wrote: On 05.03.2014 22:19, Michael Coffman wrote: I am running centos6.4. Where do I find the updated gnutls packages? I see the updated source

Re: [CentOS] gnutls bug

2014-03-05 Thread John R Pierce
On 3/5/2014 3:22 PM, Michael Coffman wrote: Thanks for the helpful replies. Guess I'll build it myself. what? why??? yum update gnutls *done* -- john r pierce 37N 122W somewhere on the middle of the left coast

Re: [CentOS] gnutls bug

2014-03-05 Thread Les Mikesell
On Wed, Mar 5, 2014 at 5:22 PM, Michael Coffman michael.coff...@avagotech.com wrote: Thanks for the helpful replies. Guess I'll build it myself. Why? 'yum update gnutls' will get it, bringing along only things specified as having version-specific dependencies if there are any. But it is

Re: [CentOS] gnutls bug

2014-03-05 Thread Michael Coffman
Not sure what your environment looks like but the systems I manage are locked down and it's typically difficult to get them changed. We have hundreds of systems ( desktop, server and HPC systems) that are all the same rev with all the same packages. A large number of vendor packages and

Re: [CentOS] gnutls bug

2014-03-05 Thread John R Pierce
On 3/5/2014 3:36 PM, Michael Coffman wrote: Not sure what your environment looks like but the systems I manage are locked down and it's typically difficult to get them changed. We have hundreds of systems ( desktop, server and HPC systems) that are all the same rev with all the same

Re: [CentOS] gnutls bug

2014-03-05 Thread Michael Coffman
On Wed, Mar 5, 2014 at 4:44 PM, John R Pierce pie...@hogranch.com wrote: On 3/5/2014 3:36 PM, Michael Coffman wrote: Not sure what your environment looks like but the systems I manage are locked down and it's typically difficult to get them changed. We have hundreds of systems ( desktop,

Re: [CentOS] gnutls bug

2014-03-05 Thread Les Mikesell
On Wed, Mar 5, 2014 at 6:00 PM, Michael Coffman michael.coff...@avagotech.com wrote: so you're a year behind on any security fixes why are you worried about this one, then? This seems like it has more potentiol to impact users in my environment that are using a web browser to access

Re: [CentOS] gnutls bug

2014-03-05 Thread Stephen Harris
On Wed, Mar 05, 2014 at 06:12:49PM -0600, Les Mikesell wrote: On Wed, Mar 5, 2014 at 6:00 PM, Michael Coffman updated. I did not realize that once the OS was vaulted, there were no more updates. Now I know so thanks... No, what everyone has said is that there _are_ updates, and yum

Re: [CentOS] gnutls bug

2014-03-05 Thread David C. Miller
- Original Message - From: Stephen Harris li...@spuddy.org To: CentOS mailing list centos@centos.org Sent: Wednesday, March 5, 2014 4:43:37 PM Subject: Re: [CentOS] gnutls bug On Wed, Mar 05, 2014 at 06:12:49PM -0600, Les Mikesell wrote: On Wed, Mar 5, 2014 at 6:00 PM, Michael

Re: [CentOS] gnutls bug

2014-03-05 Thread Les Mikesell
On Wed, Mar 5, 2014 at 6:43 PM, Stephen Harris li...@spuddy.org wrote: No, what everyone has said is that there _are_ updates, and yum knows how to get them, even selectively. More to the point, 6.4 and 6.5 are just markers in the sand for CentOS 6. 6.5 is basically just a rebasing of the

Re: [CentOS] gnutls bug

2014-03-05 Thread Bart Schaefer
Before you update anything, I suggest you run rpm -e --test gnutls If this complains about refers to more than one package then use rpm -e --test gnutls.i386 gnutls.x86_64 This will tell you what other packages depend on the gnutls library. It's probably fewer than you think, because

Re: [CentOS] gnutls bug

2014-03-05 Thread Cliff Pratt
I have some sympathy for Michael. There are organisations which are so paranoid that they will not allow updates between eg 6.4 and 6.5, either because they insist on rigorous (ie lengthy and time consuming) regression testing of applications or because a third party package vendor specifies a