New Linux Kernels


Due to recent important security vulnerabilities, we need to
load new kernels on all Red Hat Enterprise Linux 5 and 6
(RHEL5 & RHEL6) systems:

   RHEL5:       2.6.18-308.4.1.el5
   RHEL6:       2.6.32-220.17.1.el6

These kernels have been installed on all taylored RHEL
systems and should be loaded automatically at the next reboot.

Here is the schedule for rebooting systems that have not yet
loaded the new kernel in order to get this new software
running.


DESKTOP SYSTEMS

Users can reboot their taylored RHEL desktop systems any
time before the end of the day on Monday, 4 Jun 2012 to load
the new software.  Any desktop systems that have not been updated
by then will be automatically rebooted during their regular
taylor run early Tuesday morning, 5 Jun 2012.

Users whose desktop systems rely on proprietary drivers, e.g.,
for nVidia video cards, will need to obtain new versions of their
drivers corresponding to the new kernel.  If you need help with
this, please talk to your desktop administrator before the above
deadline.


PUBLIC MACHINES

The various pools of interactive compute servers will be
rebooted as follows.

Tuesday, 29 May 2012, 06:30 PDT:

    noric01,02,yakut03  (rhel5-32 pool)
    noric04,05          (rhel5-64 pool)
    noric19             (rhel6-32 pool)
    noric21             (rhel6-64 pool)

Wednesday, 30 May 2012, 06:30 PDT:

    yakut14-16          (rhel5-32 pool)
    yakut01             (rhel5-64 pool)
    noric20             (rhel6-32 pool)
    noric22             (rhel6-64 pool)

The public Linux cron server, lnxcron, will be rebooted at
06:30 PDT on Tuesday, 29 May 2012.


BATCH SYSTEMS

Batch workers will be rebooted into the new kernel between user
jobs so as to not disrupt ongoing work.


OTHER SYSTEMS

Some users may be responsible for Linux systems that taylor
classifies as servers.  Computing Division does not currently
force an automatic reboot of these systems.  If you are the
primary user or system administrator of such a system you MUST
see that it is rebooted BEFORE this deadline, i.e., close of
business on Monday, 4 Jun 2012, OR contact
unix-admin@slac.stanford.edu to request an extension.

    Please take responsibility for your own servers and do not
    wait for Computing Division to track you down after the
    deadline; otherwise, we may need to extend the automatic
    reboot policy to all servers.

(If you are responsible for such a system but would be happy to
let us reboot it automatically, please send a note to
unix-admin@slac.stanford.edu.)

Similarly, any users with non-taylored RHEL systems are
reminded that they should also plan to upgrade to these kernels
by the end of the day Monday, 4 Jun 2012.  The necessary RPMs
are available via SLAC's Red Hat Satellite Server, or the Red Hat
Network.

Any users running other flavors of Linux should check with
their distributors for information about patches for all recent
kernel (and other) security vulnerabilities.

Please send any questions or comments to
unix-admin@slac.stanford.edu.

Len Moss