From: "Geo" 

"Mike N."  wrote in message
news:gqana2lm0nn3patkrh80vjjil4o45lrdl7{at}4ax.com...

>    I haven't checked it all out, but I get the impression that this is a
> snapshot of all development in that distro in 3 months.   In other words,
> for each package, the developer checks in a new feature, a bug fix
> (exploitable or not), or a performance enhancement.   The distro librarian
> checks it for compatibility with the rest of the distro and updates the
> distro.   Next 'yum update' pulls it down.

That would make more sense, not just security patches but updates and
bugfixes as well. But then how do you manage 50 desktops? You continually
update them which brings in new bugs and/or incompatibilities, breaks
programs that interact, etc. or do you run all different versions which
makes support a nightmare or do you not patch or ..?

My methodology has always been to standardize on a certain version and
apply only the bare minimum security patches required so that you change as
little as possible until the next major upgrade which I always put off as
long as possible. Productive people hate change for the sake of change.

Geo.

--- BBBS/NT v4.01 Flag-5