<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> <HTML> <HEAD> <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"> <META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7226.0"> <TITLE>Information page about last security advisories</TITLE> </HEAD> <BODY>  <P DIR=LTR><SPAN LANG="fr"></SPAN><SPAN LANG="fr"><FONT SIZE=2 FACE="Arial">Hi all,</FONT></SPAN></P> <P DIR=LTR><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">I</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">’</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">m new with fedora,</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">and</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">i</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">’</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">m looking for a security information page/</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">site</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> about latest security advisories</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">,</FONT></SPAN></P> <P DIR=LTR><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">Like debian secu. Page :</FONT></SPAN><SPAN LANG="fr"> </SPAN><A HREF="http://www.debian.org/security/"><SPAN LANG="fr"></SPAN><SPAN LANG="fr"><U></U></SPAN><U><SPAN LANG="en-gb"><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">www.debian.org/security/</FONT></SPAN></U><SPAN LANG="fr"></SPAN></A><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> where</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">I</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> can find :</FONT></SPAN></P> <P DIR=LTR><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">-lastest advisories, with pb classification, description, CVE ref,</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">and</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> of course</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">links to</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">individual patches</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"></FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">…</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"></SPAN></P> <P DIR=LTR><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">-security repositories, where</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">I</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> can find patches only related to security concerns</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">.</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"></FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"> </SPAN></P> <P DIR=LTR><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"></SPAN></P> <P DIR=LTR><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">I searched these</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">type</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">informations on</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">fedora</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> homepage and wiki but</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">I</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> don</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">’</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">t find it</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">.</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"></SPAN></P> <P DIR=LTR><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"></SPAN></P> <P DIR=LTR><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">Indeed,</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> if</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">I</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> install critical app on a fedora server , each patches/update</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">s</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> must be qualified</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> before applying</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">,</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">I</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> can</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">’</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">t</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> patches these server without assessing impact</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">o</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">f</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"></SPAN></P> <P DIR=LTR><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">Each patches.</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"></SPAN></P> <P DIR=LTR><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"></SPAN></P> <P DIR=LTR><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">As</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> some server</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">s</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> are not connected to Internet,</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">I</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> need</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">too</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">to be able to download patches on media (CDROM, USB key,</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">…</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">)</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">…</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> </FONT></SPAN></P> <P DIR=LTR><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">(I think it</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">’</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">s possible with yum to make a local repository)</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"></SPAN></P> <P DIR=LTR><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"></SPAN></P> <P DIR=LTR><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">Note that RedHat solution is not suitable, as even if the rhn is useful to extract only security updates, it</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">’</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">s not possible to</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> easily</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> update server offline</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">, nor to update </FONT></SPAN></P> <P DIR=LTR><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">Package list of a server without connecting it to Internet.</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"></SPAN></P> <P DIR=LTR><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">Thank for your help.</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"></SPAN></P> <P DIR=LTR><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="en-gb"></SPAN></P> <P DIR=LTR><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr-fr"></SPAN><A NAME=""><SPAN LANG="fr-fr"><FONT SIZE=2 FACE="Arial">==</FONT></SPAN></A></P> <P DIR=LTR><SPAN LANG="fr-fr"><FONT SIZE=2 FACE="Arial">Pierre Monlong - Antiope/IF/IE</FONT></SPAN></P> <P DIR=LTR><SPAN LANG="fr-fr"><FONT SIZE=2 FACE="Arial">Tel : +594 (0)5 94 33 47 53 / Fax : +594 (0)5 94 33 42 59</FONT></SPAN></P> <P DIR=LTR><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr-fr"><FONT SIZE=2 FACE="Arial">pierre.monlong@cnes.fr</FONT></SPAN></P> <P DIR=LTR><SPAN LANG="fr-fr"><FONT SIZE=2 FACE="Arial">==</FONT></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr"></SPAN><SPAN LANG="fr-fr"></SPAN></P> <P DIR=LTR><SPAN LANG="fr"></SPAN></P> </BODY> </HTML>