[Case 85597] Security Advisor - kernel version

[popeye]

Hi in WHM cPanel Security Advisor it says this below, but its all ready updated. but i clicked it again and it checked said no updates but still get this message.

Current kernel version is out of date. current: 2.6.32-358.23.2.el6, expected: 2.6.32-431.1.2.0.1.el6

PS also rebooted the server

 

[ThinIce]

Have you tried yum update on the command line?

If so, and you're on cetos hop into /etc/yum.repos.d/CentOS-Base.repo and take a look at whether you're set to use a particular mirror for updates. Some seem to have purposefully held back on 2.6.32-431.1.2 as 2.6.32-431.1.2.0.1 was released afterwards to fix a screw up

You can check your mirror against the status of CentOS mirrors to see if it's up to date - if not and if you want the update you can always change your mirror (as long as it's holding 2.6.32-431.1.2.0.1!

 

[popeye]

It said it had updated when i ran yum update from a command line, and also said it had removed the old version.


PS just run the command yum update and got this below

Loading mirror speeds from cached hostfile
* base: mirrors.coreix.net
* extras: centos.serverspace.co.uk
* updates: centos.serverspace.co.uk
Setting up Update Process
No Packages marked for Update

 

[ThinIce]

Take a look in boot and your grub.conf - is the new kernel present? what does uname -a return? If your machine is running the new kernel from that output you can ignore the security advisor output, I'm not 100% on if it caches it's checks anywhere

 

[popeye]

2.6.32-431.1.2.0.1.el6.x86_64 #1 SMP Fri Dec 13 13:06:13 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux

 

[cPanelMichael]

Hello

There is an internal case open to address the issue with the Security Advisor detecting the incorrect kernel. For reference, the case number is 85597. You can verify the kernel installed on your system via:

uname -r

Thank you.

 

[PCZero]

Michael to the rescue again!

 

[Hispalab]

Some new on this issue?
Happy New Year.

 

[cPanelMichael]

There is currently no time frame available on a resolution. Feel free to monitor our change log for the case number:

cPanel - Change Log

Thank you.

 

[durangod]

I was reading this because i have a similar issue, i think my kernel number is dif than above but same issue.

however when i look at the CentOS-Base.repo file the centos.org is not even on the list for me in the USA

[updates]
name=CentOS-$releasever - Updates
mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=updates
#baseurl=http://mirror.centos.org/centos/$releasever/updates/$basearch/

not found in USA listing so can i just try some others and the do yum update on each and see which one fires the kernel update or whatever it does.

mine shows

A newer kernel is installed, however the system has not been rebooted. running kernel: 2.6.18-308.8.2.el5.028stab101.1, most recent installed kernel:

this is my first time doing this but i gather you do it something like this

changed mirror list to mirror-status
changed base to the one i wanted on the list mirror.centos.serving.com

[updates]
name=CentOS-$releasever - Updates
mirrorlist=http://mirror-status.centos.org/?release=$releasever&arch=$basearch&repo=updates
#baseurl=http://mirror.centos.servint.com/centos/$releasever/updates/$basearch/

well that didnt work i should not have to play a guessing game folks, i should be able to go right to the issue and right to the instructions of exactly what to do here.

yum update
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
YumRepo Error: All mirror URLs are not using ftp, http or file.
Eg. </HTML>/
removing mirrorlist with no valid mirrors: /var/cache/yum/x86_64/6/updates/mirrorlist.txt
Error: Cannot find a valid baseurl for repo: updates

UPDATE i dont even have a boot/grub/grub.conf file, it does not exist.

 

[durangod]

wonder if i can do this via rpm


also i have verified what i am running now.

uname -r
2.6.18-308.8.2.el5.028stab101.1

 

[popeye]

Are you on a OpenVZ vps server ? if you are it uses a shared kernel and you wont be able to change it.

 

[durangod]

Yes sir i am openVZ and perfect timing because i just found that out as well. But since the shared one is 2+ years old i have sent my host a ticket to see if i can get it updated.

Thank you so much...

 

[popeye]

Ok cool hope your host updates it for you because 2 years old is not good.