security/wiki
8
0
Fork 1
generated from sig_core/wiki-template
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

base: security:9ffc253e492d30ddc78200e4b6d81848a2c6c70e
Branches Tags
security:main
security:gh-pages
security:update/cve-2024-6387
...
compare: security:9cc930872ee19c74bc0918acc6e1ee3744bb6f41
Branches Tags
security:gh-pages
security:main
security:update/cve-2024-6387

2 Commits
9ffc253e49 ... 9cc930872e

Author SHA1 Message Date
Solar Designer
9cc930872e Merge pull request 'update link and shasum for new release package, add note about enabling' (#38) from update/cve-2024-6387 into main
All checks were successful
mkdocs build / build (push) Successful in 28s
Details 
Reviewed-on: #38
Reviewed-by: Solar Designer <solardiz@noreply@resf.org>
 2024-07-03 06:53:55 +00:00
Neil Hanlon
1956c199e0
update link and shasum for new release package, add note about enabling 2024-07-02 23:01:22 -04:00
1 changed files with 8 additions and 2 deletions
Show Stats Expand all files Collapse all files

10
docs/index.md
View File

@ -20,18 +20,24 @@ dnf install rocky-release-security
Download the release package containing our repository configuration file and package signing public key. Use the version that corresponds to the major version of your EL distro.
- [rocky-release-security-9](https://download.rockylinux.org/pub/rocky/9/extras/x86_64/os/Packages/r/rocky-release-security-9-3.el9.noarch.rpm)
- [rocky-release-security-9](https://download.rockylinux.org/pub/rocky/9/extras/x86_64/os/Packages/r/rocky-release-security-9-4.el9.noarch.rpm)
- [rocky-release-security-8](https://download.rockylinux.org/pub/rocky/8/extras/x86_64/os/Packages/r/rocky-release-security-8-3.el8.noarch.rpm)
Verify the package file's SHA-256 digest with `sha256sum`. The currently expected digests are:
```
0d0cfcb16379b4c374b45a7a4ec86894f5bbdd977103cc5544be0f6fc2581a2a rocky-release-security-9-3.el9.noarch.rpm
4a728939103ed54518aefa3a7729921df48a2ec8dc24138b91f3bcd400afacb0 rocky-release-security-9-4.el9.noarch.rpm
8dc7912f0ab55dff4cb2b1dc9262c22aa89d911cdb680d33213737597d865006 rocky-release-security-8-3.el8.noarch.rpm
```
This isn't as secure as checking the package signature would be _if_ you previously had our package signing public key, but on another distro you probably don't have that yet, so checking the digest against its copy obtained from this separate website is a best-effort measure.
### Note
Regardless of whether installing on Rocky or another EL distribution, the `security-common` repository comes disabled by default out of an abundance of caution because of the packages contained within the repository which override the base Rocky Linux packages.
In order to receive packages from the SIG, either enable the repository (`dnf config-mangager --enable security-common`), or activate for a single DNF transaction with `dnf --enablerepo=security-common install <package>`.
## Packages
### Extra packages (for EL8 and EL9)