From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.2.1) Gecko/20030225
Description of problem:
I have two hosts with a basic entitlement. Both hosts have "Auto Errata
Updates" set to "yes" which is verified on the details page for each host.
Neither host will auto update. Critical updates have repeatedly become
available, with notification to me by e-mail. As much as 12-24 hours after
notification I can log in to Red Hat network, see critical updates available,
see that the hosts both hosts have been checking in on schedule, and that no
automatic updates have been done or are scheduled. Manually running up2date
correctly notes that updates exist and updates the systems.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. Wait for critical update to be released
It is dangerously misleading for security to believe your hosts are
automatically receiving updates when they must be performed manually.
More information please, what version(s) of RH Linux are you running, what
recent critical errata have not auto-applied.
Also, please provide the results of:
rpm -q up2date
grep -e SkipList= /etc/sysconfig/rhn/up2date
I'm running Red Hat 9 with all errata applied
# rpm -q up2date
# grep -e SkipList= /etc/sysconfig/rhn/up2date
The recent openssh and sendmail errata required manual updates, as did gtk-html
when it came out last week.
Removing security status given this issue isn't really a security flaw.
*** This bug has been marked as a duplicate of 98907 ***
Changed to 'CLOSED' state since 'RESOLVED' has been deprecated.