Re: [suse-security] YOU does not install Kernel Update
*Matthias-wieser@t-online.de (Matthias Wieser) wrote on Thu, 14 Aug 2003:
Hi,
I'm using Suse 8.2 with Kernel k_athlon-2.4.20-86. There should be an update to k_athlon-2.4.20-100 which YOU doesn't show.
... ... YOU may not show it, but SuSE does at: http://www.suse.com/us/private/download/updates/82_i386.html .. ..
YOU only installed the kernel-source update (without first showing it (maybe because You thinks this packet have been updated in the past) until you click on "include installed patches" (dt: installierte Patches einschließen).
What should I do to install the Kernel? ---- <text deleted> ---
In reply Hilbert.Steinbach@t-online.de (Hilbert Steinbach) wrote on 8/14/03:
Hi Matthias,
before downloading and installing the new kernel think if you really need to upgrade within a patchlevel. If you need/want urgently update, you can download the wanted kernel on ftp.suse.com (...).
.. ... Or as I mentioned above from: http://www.suse.com/us/private/download/updates/82_i386.html .. ...
Find out your current working kernel version with 'uname -r'. Choose now the rpm packet with the corresponding newest kernel. As i recall you should use for installation rpm -Uvh --force --nodeps kernel<version>.rpm. There is also an article on the SuSE support pages covering this topic. Doublecheck if SuSE has some new specific informations there.
Best regards Hil
.. Matthias, I have couple of comments: 1.) uname -r doesn't give rpm version number, assuming you don't have a custom kernel, whereas for the stock SuSE kernel's "pin k_athlon" does. (in my box I need to use "pin k_deflt" because that is the kernel I am using; others "pin k_psmp") .. 2.) SuSE provides patch rpms to cut down the load on their servers. However, in the case of kernel the difference between patch and "whole" in general is relatively small and I want the whole kernel anyways in case I have to reinstall... so why use patch ??? 3.) But if you are using a "patch", I wouldn't use: "rpm -Uvh --force --nodeps *.rpm" I would want to know if patch worked with what I got installed. (in fact using Kpackage I would do a test install) 4.) However, as I said, I prefer not to use the patch kernel. Also not to use YOU to upgrade kernels. I get the kernel via ftp, run "rpm -qpi ..." on it to verify it's name, do "rpm -v --checksig ..." to verify that it's for real and then install from "init 1" using: rpm -Uvh *.rpm 2>&1 | tee text.txt in case the install give any interesting messages, then run "SuSEconfig" SuSE is getting more sophisticated with YOU, but there are enough horror stories" about YOU that the above approach seems better, at least to me. Those who are running custom kernels are probably laughing out loud over my approach, but hey it works... HTH GAr __________________________________________________________________ McAfee VirusScan Online from the Netscape Network. Comprehensive protection for your entire computer. Get your free trial today! http://channels.netscape.com/ns/computing/mcafee/index.jsp?promo=393397 Get AOL Instant Messenger 5.1 free of charge. Download Now! http://aim.aol.com/aimnew/Aim/register.adp?promo=380455
Am Donnerstag, 14. August 2003 23:33 schrieb GarUlbricht7@netscape.net:
*Matthias-wieser@t-online.de (Matthias Wieser) wrote on Thu, 14 Aug > >>
I'm using Suse 8.2 with Kernel k_athlon-2.4.20-86. There should be an update to k_athlon-2.4.20-100 which YOU doesn't show. ... YOU may not show it, but SuSE does at: http://www.suse.com/us/private/download/updates/82_i386.html
So you mean, YOU is unsuitable to get security holes fixed?
What should I do to install the Kernel?
before downloading and installing the new kernel think if you really need to upgrade within a patchlevel. If you need/want urgently update, you can download the wanted kernel on ftp.suse.com (...).
If I use YOU I dont't always look at ftp.suse.com to check if YOU works right.
participants (2)
-
GarUlbricht7@netscape.net
-
matthias-wieser@t-online.de