[BlueOnyx:02186] Re: New CentOS5 kernel available (important update)

[Alan Kline]

I just tried "yum update", and got a response that no packages were 
marked for update.
The repositories it looked at were:

 * base: mirror.raystedman.net
 * BlueOnyx: www.blueonyx.it
 * updates: mirror.sanctuaryhost.com
 * addons: mirrors.serveraxis.net
 * Solarspeed.net: mirror.smd.net
 * extras: mira.sunsite.utk.edu

Are those all I should have, or am I missing something for the CentOS 
update?

Alan

Michael Stauber wrote:
> Hi all,
>
> With an unprecedented speed (same day as RedHat) the CentOS.org team has 
> released an updated CentOS5 kernel: 
>
> 	kernel-2.6.18-128.7.1.el5
> 	http://lists.centos.org/pipermail/centos-announce/2009-August/016062.html
>
> This updated kernel fixes two important security holes ({CVE-2009-2698} and 
> {CVE-2009-2692}) which could allow that a local unprivileged user runs a 
> denial of service attack against your server, or which could allow the 
> attacker to gain root privileges.
>
> Additionally it fixes a potential memory leak.
>
> We recommend that you run "yum update" as soon as possible and then also 
> reboot your BlueOnyx so that the updated Kernel comes into effect.
>
> Users who already have installed our unofficial CentOS5 kernel from the 
> BlueOnyx testing repository (see message [BlueOnyx:02135]) should also "yum 
> update" and reboot.
>
>