This is part of The Pile, a partial archive of some open source mailing lists and newsgroups.
Subject: Re: Telnet Security Issue From: marc_news@merlins.org (Marc MERLIN) Date: 7 Aug 1999 00:23:52 GMT On 4 Aug 1999 16:32:50 -0700, Nick Moffitt <nick@zork.net> wrote: >Quoting hartr@redhat.com: >> I'd just like to intrude here and say that by 'older Red >> Hat box', the poster probably means an older Red Hat box >> that has not been maintained by applying all the security >> fixes. > Yes, this is certainly a good point. >Unfortunately, this is a manual process, and would be >greatly enhanced with something like "apt-get >dist-upgrade". I for one know that my debian stable >systems have all the latest security and bug fixes simply >because I've asked the system to get the very latest. While it won't do for system upgrades, autorpm will do what you say for applying packages from the update directory on an ftp site. It however isn't shipped with RH by default. The other issue is that you can't differentiate security updates from XFree updates which merely add new support for new cars for instance. I believe it also doesn't have any provision for restarting the service in question (also that'd be easy to add). While the situation is not as bad as you thought, debian still wins there. ===