Updating software in fedora 7
Looks like if you want 7.4, or need it for PCI, you will have to switch to Ubuntu? PCI scans are the least of your concern if you're really running 6.5.If your PCI auditors require Open SSH 7.4, please point them to the backporting page (which you should also re-read).If your system is not subscribed, see Chapter 6, Yum provides secure package management by enabling GPG (Gnu Privacy Guard; also known as Gnu PG) signature verification on GPG-signed packages to be turned on for all package repositories (i.e. When signature verification is enabled, Yum will refuse to install any packages not GPG-signed with the correct key for that repository.This means that you can trust that the packages you download and install on your system are from a trusted source, such as Red Hat, and were not modified during transfer.By downloading Fedora software, you acknowledge that you understand all of the following: Fedora software and technical information may be subject to the U. Export Administration Regulations (the “EAR”) and other U. You can use the Live image to test and play with Fedora without making changes to your hard disk. When I try to update the vmware tools, I get errors (see attachments).
That kind of information can be found from https://access.redhat.com/security/cve/cve-2016-3115 or https://bugzilla.redhat.com/show_bug.cgi? If the package is not vulnerable, it will be listed as "not affected" or something along those lines.I tried to install Openssh7.2p2 with patch for the mentioned CVE case. (I am communicating with the compliance auditors.)I build Openssh 7.2p2 rpm from https://dl.fedoraproject.org/pub/fedora ... (as there are few customization need to be done in default package)Openssh-7.3p1 is under testing for Fedora 25.And when I tried to create rpm for 7.3, it is giving errors for missing configuration or documentation errors and also I need to update some other packages packages.Yum performs automatic dependency resolution on packages you are updating, installing, or removing, and thus is able to automatically determine, fetch, and install all available dependent packages.The following sections assume your system was registered with Red Hat Subscription Management during installation as described in the Red Hat Enterprise Linux 6 Installation Guide.