Re: [webmin-l] PHP & MySQL

Kris Deugau <[email protected]>
Newsgroups gmane.comp.web.webmin.general
Organization Vianet Internet Solutions
Message-ID <[email protected]>
MAR wrote:
> 
> Upgrading the OS is not an option, unfortunately. :p
> 
> My version is: CentOS release 6.7 (Final)
> 
> So, you are saying that via yum at least, or maybe at all, I can't upgrade either of these?

Not to a newer upstream version, no, unless maybe there's a somewhat
newer version in the EPEL repository.  You might also find one in some
third-party repository;  I don't know of one offhand.

This is fundamentally how all long-lived stable Linux distribution
releases operate;  they provide a fixed platform with no major changes
for the lifetime of the product.  Even upstream patch releases are
rarely pushed out as-is during the distribution's stable lifetime;  when
they are, it's most often early in the life cycle, not later on.  The
older a stable distribution gets, the fewer non-security updates it
receives.

Debian has only recently broken that policy in the case of a *very*
select number of packages - MySQL is actually the only one I can think
of offhand.  In that case it's because of the time cost to manually wade
through the upstream changelog and source to compare with the previous
version to extract *just* any security fixes - previously the Debian
package maintainer could browse the MySQL VCS, and select only the
changes that were actually security fixes, but Oracle is now only
publishing release tarballs, not patch sets or VCS access.

You should, however, upgrade to the current EL6 packages ("yum upgrade",
or Webmin should report packages available for update), because IIRC
there have been several major security updates for things like OpenSSL
that you really don't want to leave exposed.

-kgd

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most 
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
-
Forwarded by the Webmin mailing list at [email protected]
To remove yourself from this list, go to
http://lists.sourceforge.net/lists/listinfo/webadmin-list
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.