Hi all,

I need to upgrade to Red Hat kernel 2.6.26.3 or newer according to CVE-2008-3276(http://cve.mitre.org/cgi-bin/cvename...=CVE-2008-3276). The system I have is an x86 that is running Red Hat Enterprise Linux WS (v. 4). My current kernel that I have from redhat is 2.6.9-78.0.5.EL. I cannot connect my system to the internet so I would like to find a rpm. However, my current kernel is the newest one that I've been able to find.

Can someone tell me where I might be able to look?


P.S. (I'm new to the forums and Linux so please forgive me if this post is in the wrong forum or has been asked before.)

Thanks...

Hi.

You're not affected, apparently. You're on 2.6.9, but the vulnerability is in 2.6.17-rc1 through 2.6.26.2.

Dave

RH is funny about its kernel numbering. It never changes the major release number of the kernel for any one version of the os (4.X will only ever have a 2.6.9-x kernel). It does apply security patches to that kernel that make it (essentially) equivalent to current kernels.

Thanks for the quick reply, but actually I just ran into another security update that I need to correct dealing with the kernel. That update makes me update to version 2.6.25 or later and the update in the original post then takes effect. So it looks like I do need to get 2.6.26.3 or later somehow. Anyone know if that's even a possibility and where?

Thanks again.

If can not connect just that system to the 'net, I would set up another (identically configured) system with access to the RHN, and update it using up2date. You can even download packages without installing them, and then somehow push them to the server your topic is about.