Linux Patching

[Yu Ting LIU]

Hi,

Anybody knows any helpful website about Linux patching?

Thanks & Regards!
Yu Ting

[Alexander Chuzhoy · Accepted solution]

you have to be more specific.
If your linux is fedora or redhat for example:
Then use the
up2date
utility to update the packages with newer versions.

[Shaikh Imran]

Hi,

Do you want to know about patching or you want the websites which have the patch for linux ?
Anyways
just check some:
http://www.acc.umu.se/~tao/linux/patches.html

ftp://sunsite.unc.edu/pub/linux/kernel/

http://www.miredespa.com/wmaton/linux/kernel-patch-HOWTO-2.html

Regards,

[shetty]

Hi Yu Ting,
Here are the site names for patches.

1) Index of /~akpm/linux/patches-

www.zip.com.au/~akpm/linux/patches

2) Sun Linux Support - Sun Linux Patches

sunsolve.sun.com/patches/linux/security.html

3) redhat.com | Security and Updates

www.redhat.com/support/errata/

Check this websites.I hope it will help you.

Shetty

[Jan Sladky]

hi Yu,

if you have SUSE distro, you can use automatic update with manual selection of particularly patches from YAST directly, good service ..

br Jan

[Paprocki]

To have your packages up to date:

The famous apt-get :
http://www.aplawrence.com/Linux/aptget.html

Yum:
http://linux.duke.edu/projects/yum/download.ptml

It's easy to use and useful...


Florent

[Yu Ting LIU]

Hi,

Thank you all for your response. And sorry about that I forgot to specify I am using Linux Red Hat.

I have some experience of patching Solaris and HP-UX and totally no knowledge of patching Linux - don't know how to patch, where is patchs.... Now from all your replies if I am not wrong for Linux patching I should patch kernel and update the rpm packages at the same time.

Thanks again & Regards!
Yu Ting

[Steven E. Protter]

Around here we thank with point assignment.

Linux has a relatively easier to use, though less flexible patching scenario in the Red Hat World.

up2date provides replacement rpm's for the application that is being patched. It has a new version number, it replaces the binaries but leaves your configuration changes alone.

All with a GUI

Good Luck and have a good time with Linux.

SEP

[Vitaly Karasik_1]

[Agree with Steven - as for now "rollback" feature in rpm isn't mature, we cannot build hierarhy like subproduct-product-bundle as in HPUX world.]

Regarding patching solutions - in addition to RHN [up2date] there are RedCarpet, Aduva [www.aduva.com] system and Patchlink.

Rgds,
Vitaly

[Marco Di Ianni]

You can find all official kernel patch on
http://www.kernel.org/

Bye!

[rmueller58]

Prefer kernel.org.

download the kernel source and patches you want, place in /usr/src

tar -xzvf linux-2.x.xx.tar.gz
cd linux-2.x.xx
patch -p1 < ../
(MODIFY THE Makefile) change the "EXTRAVERSION" parameter
make mrproper
make config
or
make menuconfig (changing any module requirements if necessary)
make dep
make clean
make bzImage
make modules
make modules install
cp arch/i386/boot/bzImage /boot/vmlinuz2xxx
cp System.map /boot/System.map2xxx
cd /boot
rm -f System.map
ln -s Systemmap2xxx System.map
mkinitrd initrd-2.x.xx.EXTRAVERSION 2.x.xx.EXTRAVERSION

change your /etc/lilo.conf

(should look like something like this)
prompt
timeout=30
default=linux-xxx
boot=/dev/sda
map=/boot/map
install=/boot/boot.b
message=/boot/message
linear

image=/boot/vmlinuz-2.4.20-8smp
label=linux
initrd=/boot/initrd-2.4.20-8smp.img
read-only
append="root=LABEL=/"

image=/boot/vmlinuz-2.4.20-8
label=linux-up
initrd=/boot/initrd-2.4.20-8.img
read-only
append="root=LABEL=/"

image=/boot/vmlinuz-2xxx
label=linux-xxx
initrd=/boot/initrd-2.x.xx.EXTRAVERSION
read-only
append="root=LABEL=/"

Where "xxx" is your version or EXTRAVERSION

then REBOOT and load the kernel,

if it panics, boot normally with the "old" kernel by selecting using LILO
review the procedures associated with your patch.

[Huc_1]

It all depends !

If you want lots of controle and know what your doing then Rex Muller way is the way to go.

If you want to keep update in a nearly automatic way using gui and none gui tool then redhat up2date is the way (easy and relatively secure)

If you talking of standalone for home pc/laptop
then today I would use yum

like in ;

#yun update

this will use a conf file to contact some of the many yum servers (this if well setup is fast and with a fair security level )
this method use rpm and

pick your choise !

Jean-Pierre