redhat-fixes-check -- update with new security fixes RPMs

This is old and not needed since now Red Hat and others have easier and better methods.

redhat-fixes-check

(Or maybe this should be called rpm-fixes or rpm-update? What do you think? Send me an email.)

Current version: 0.01
Updated: 24 October 2000

redhat-fixes-check uses a ftp directory listing (generated with lynx) of the Red Hat security fixes directory and compares each fixed RPM with those installed. If needed, it will download RPM and update using it. I know that some program exists like this, but I didn't have it, so I quickly made this script.

Some similar ideas include:

(Debian users can use Debian's APT or GNOME APT.)

An example of the security fixes directory is: /pub/Mirror/Linux/redhat/ftp.redhat.com/updates/6.2/i386.

It is formatted like (as rendered with Lynx):

Mar 29  2000  rpm              ircii-4.4M-1.i386.rpm  415Kb
Aug  9 15:53  rpm              popt-1.5-9.6x.i386.rpm  37Kb
Aug  9 15:53  rpm              rpm-3.0.5-9.6x.i386.rpm  1207Kb
Aug 22 21:41  rpm              xchat-1.4.0-2.i386.rpm  616Kb

Basic usage (where i386 is the directory listing):

    ./redhat-fixes-check.pl < i386

It doesn't work perfectly, but it definitely saves time. Sometimes, you may have to run it a few times in a row to make sure it gets past the dependencies. It will not download the RPMs again each time. (On one occasion, I had to change the rpm command arguments in the code to make sure it forced the update.)

To use, you need to have it download to a downloads directory. You can set the $update setting to "0" (zero) and it won't do the real update -- it will just compare and download.

It has been used with Red Hat Linux 6.2 and 7.0. You'll need to set the fetch_location to the location to get the RPMs.

It may be a good idea to add the retrieval of the FTP listing into the code itself. Also, it should add some check for making sure you don't upgrade your kernel or any other RPMs you don't want to change. (I did have this part, but I don't have access to the server with the updated version.) Also it doesn't verify that a RPM in your downloads directory is the correct file even if the name is correct.

This code is provided "as is" and without any express or implied warranties, including, without limitation, the implied warranties of merchantibility and fitness for a particular purpose. Use at your own risk: In no event shall the author be liable for any direct, incidental or indirect damages.

Current version download:
redhat-fixes-check.0.01.txt (24/Oct/2000)

If you have any ideas, please email me at jeremy@reedmedia.net.