I topped off the rpm-based security updates on pliny and larousse, I *think* I got the updates installed on geoffrin via yast2, and I gave them more current kernels which shouldn't have the recently publicized kernel vulnerability (the latest Red Hat-provided one for larousse, and a compiled 2.4.23 for pliny; I assume the SuSE updates should also be current).

They'll need to be rebooted for the kernel upgrades to take. L & P are theoretically both set to boot to the new kernels on the next boot only; so if they won't come up, a second reboot should bring back the old kernel.

Since this involves conservatively some 30 minutes of downtime (possibly rather more if there are problems) I'd rather not do it in the middle of the day. Note also that geoffrin cannot be remotely rebooted yet if it can't be logged into.

-- brion vibber (brion @ pobox.com)