[FLSA-2004:1804] Updated kernel resolves security vulnerabilities

[Heikki Kortti]

On Mon, 18 Oct 2004, Dominic Hargreaves wrote:

> Please note that this update is also available via yum and apt.  Many
> people find this an easier way to apply updates.  To use yum issue:
> 
> yum update

Hasn't anyone noticed that this does not really work for kernel packages? 
Yum 2.0.7-1 shows that the kernel update is available (with check-update), 
but "yum update" results in yum pulling up a blank: 

# yum --version
2.0.7
# yum check-update
Gathering header information file(s) from server(s)
Server: Red Hat Linux 9 - i386 - Base
Server: Red Hat Linux 9 - Updates
Finding updated packages
Downloading needed headers
Name                                Arch   Version                  Repo
------------------------------------------------------------------------
kernel                              i386   2.4.20-37.9.legacy       updates

# yum update
Gathering header information file(s) from server(s)
Server: Red Hat Linux 9 - i386 - Base
Server: Red Hat Linux 9 - Updates
Finding updated packages
Downloading needed headers
Resolving dependencies
Dependencies resolved
I will do the following:
Is this ok [y/N]: N
Exiting on user command.

Same goes also with "yum update kernel". Yum config is pretty much normal 
with only some additional mirrors set. 

Of course "yum install kernel" works OK (and should be recommended 
anyway), so it might be a good idea to advise users to do that instead. 
Although this does not solve that fact that the yum behaviour in the above 
case is downright counterintuitive... 

-- 
Heikki Kortti