1

I found this vulnerability with polkit. It was found in Jan 22. How does keeping Linux updated security wise works in general?

If I run dnf update on CentOS9 - will it fix it? Or shall I look into each and every vulnerability myself and fix it manually?

enter image description here

Boppity Bop
  • 752
  • 3
  • 11
  • 34

1 Answers1

3

It should fix it.
Errata are of three types: bug, security and enhancements.
with dnf update, you will get all of them.
You can filter as well; for e.g., to check only for security updates, run:
dnf check-update --security
and you can apply them with:
dnf update --security

Kwakou-Steve
  • 56
  • 1
  • 1
    I don't know if this is still relevant since CentOS became part of RedHat and its usecase was changed from clone to upstream beta release, but before this, CentOS7 (contrary to RHEL7) didn't tag security updates, meaning you had to apply *all* updates to get *security* updates. See this Q/A: [Update CentOS Security Patches](https://serverfault.com/questions/996189/update-centos-security-patches) – A.B Apr 23 '22 at 10:25