[rhn-users] Updates not so up2date

[Adam Ullman]

I recently performed a port scan using Nessus (http://www.nessus.org) 
of my Red Hat 9.0 webserver which is fully up to date (apparently) 
and found a lot of security holes due to using old versions of 
software. For example httpd-2.0.40 when 2.0.48 is available and 
sendmail-8.12.8-9 when 8.12.10 is available.

What's the deal with this? Why aren't red hat installing the latest 
versions automatically? Especially when security holes are found in 
the existing versions?? Do I have to go and update everything on my 
own?

Thanks,

Adam


-- 
Adam Ullman
Web Application Developer
CoCo, School of Development & Learning
Faculty of Education & Social Work
The University of Sydney
Phone: (02) 9351 2612
E-mail: a.ullman at edfac.usyd.edu.au
http://coco.edfac.usyd.edu.au