We run Citrix XenServer as our virtualisation platform. Presently we're right up to date with our XenServer service packs and hotfixes i.e. we're running XenServer 6.2SP1 with the SP1015 update applied on top of that:
In our current state of affairs CentOS 6.4 is the highest supported version of CentOS supported by Citrix:
Because Citrix has no official support for later versions of CentOS 6, and so that I don't accidentally
yum update my servers to a later (and unsupported) version of CentOS 6, I need to ensure that I configure
yum to only use http://vault.centos.org/6.4 to obtain base and update packages.
My concern is that I am now no longer going to receive critical security updates such as this one:
When I browse:
I can see that the last kernel update was
kernel-2.6.32-358.23.2.el6.x86_64.rpm dated 17-Oct-2013 12:47.
Am I correct in assuming that I will never receive critical security updates (kernel or otherwise) if I lock
yum to only use the 6.4 package repository?