where? security updates for FC4

[Michal Jaegermann]

On Wed, Jan 03, 2007 at 02:55:04PM -0800, Florin Andrei wrote:
> 
> What would be the best source of security updates for FC4 short-term?

There is no universal answer.

> SRPMs from FC5 or FC6, recompiled?

Very often this works pretty well although not always.  Most likely
the is good for the first try (on source level, not binaries).

> But then there might be some 
> dependency issues that might get ugly.

What dependencies?  Either you edited spec and recompiled
results, which means among other things that you are not using
a version which is too high for other packages which may be using
it, or this is not doable.  In both cases you do not have any
dependency problems although in the second case you are also
missing an update.

> SRPMs from RHEL or CentOS?

They are really the same.

> Which version would be closest to FC4?

Version of what?  Quite often these packages are "too old" to
be used on FC4 directly.

You are forgetting another option.  You are taking src.rpm package
from FC4 to be updated and you apply patches "stolen" from updated
corresponding packages from FC5/FC5 and/or RHEL.  Very often this is
straightforward or nearly so.

If all of that would be so automatic as you seem to imagine then
Fedora Legacy would have no constant problems with manpower and
missing contributors.

   Michal