[SOLVED] Updates: security vs new releases

[charlie205]

I've been using yum update to update the currently installed packages on my CentOS system. Recently I discovered my iptables binary is a bit outdated (version 1.3.5). A friend told me I am only installing new security patches with the above command (and a mostly default yum.conf) and this does not include new releases.

Is this true? If so, how do I install new releases? Would yum upgrade packagename take care of this?

Also, would yum list obsoletes tell me there are new releases available?

Disclaimer: I don't have ready access to this system at the moment. Normally I would have tested that last question for myself before asking, but I won't get back to the console for a few hours.

[daark.child]

Its unlikely that you will be able to upgrade to the latest version using "yum update" or "yum upgrade". The main reason for this is that due to stability issues, RHEL (and therefore CentOS), tends to stick with the same major version of a package throughtout a release and only patch for security reasons. This means that if for example they shipped somepackage-1.0 in RHEL 5, they will not upgrade to somepackage-2.0 just because its a newer release.

[coopstah13]

Most distros operate this way in fact, and usually they not only stick with a major version number but a minor version number as well! This is to prevent breakage and instability issues. Usually the newer version of the distro will have newer versions. Some distros however, are rolling release, such as Arch linux. Here you will get newer versions of the software, also the same would be for debian unstable branch as well. Nothing is preventing you from compiling the newer version yourself and installing it, just be aware that now you will be the one to maintain it and install security patches if necessary.

[charlie205]

Thanks for the answers. I will choose not to compile/install the newer packages manually in order to avoid the additional maintenance. I like the ease of use offered by the package management software.

Thanks again!