prakash mahavrataya <[email protected]> wrote:
> This is a secured lab without internet access so i need to get the
> rpm to install it manually. And the ones on the rhn site are almost
> the same as that i have.

The ones on RHN will be the latest, released versions for RHEL5.
Understand these may _not_ be the latest "upstream" versions.

Please see "Backporting of Security Fixes" for more information:  
  http://www.redhat.com/security/updates/backporting/  

And the main, public RHN Errata pages also detail updates (including
CVE numbers addressed):  
  http://rhn.redhat.com/errata/  

On the system itself, the "changelog" of each packages will is the
CVE numbers, BZ numbers and other security, ticket, etc... numbers
that are addressed in updates.  E.g.,
  # rpm -q --changelog kernel | grep -i CVE

Do _not_ trust package version numbers for security fixes.  _Only_
trust the documented CVE numbers in the errata/packages themselves.


-- 
Bryan J  Smith             Professional, Technical Annoyance 
Linked Profile:           http://www.linkedin.com/in/bjsmith 
------------------------------------------------------------ 
"Now if you own an automatic ... sell it!
"You are totally missing out on the coolest part of driving"
                                         -- Johnny O'Connell



_______________________________________________
rhelv5-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/rhelv5-list

Reply via email to