Re: need to update the following after security audit

[Michael Schwendt <fedora wir-sind-cool org>]

On Mon, 11 Apr 2005 23:42:32 -0700 (PDT), Leuy Eeelyu wrote:

> Hi.. After the security audit, it is found that some
> of the application in our RHEL box is old.  May I know
> how to upgrade them??  Do you need to download the RPM
> on the net or I can just do a
> up2date-upgrade-to-release version kind of things.??? 
> 
> 
> OpenSSH 3.6.1p2 (protocol 2.0)
> 
> Apache httpd 2.0.46 -need to upgrade to 2.0.5
> 
> Squid webproxy 2.5.STABLE3- need to  update the latest
> patches
> 
> Where to get those patches?
> 
> MySQL 3.23.58- need to upgrade to version 4.0.21
> Do we need to reconfigure the database after the
> upgrade?

Don't rely on version numbers. Examine the RPM packages for backported
security relevant patches. E.g. use rpm --query --changelog packagename
or read Red Hat's advisories.

http://www.redhat.com/advice/speaks_backport.html