CentOS Errata and Bugfix Advisory 2014:1642
Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-1642.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
i386:
1cbecc8922d43a0adcccd726e5803e76175f2fcca868baa94977f23a0882d983 rsync-3.0.6-6.el5_11.i386.rpm
x86_64:
aa673131601130f8ac144a0047914df78daf1296a424fd7ba9b0dbe61a4276df rsync-3.0.6-6.el5_11.x86_64.rpm
Source:
12ce50da9141459819c943b7ac95dff36fb8cc9f42b50842ece6bbe0cb574b73 rsync-3.0.6-6.el5_11.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos(a)irc.freenode.net
CentOS Errata and Security Advisory 2014:1635 Critical
Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1635.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
i386:
9df05ee668d515f3ece37ee2e4cf518ffef8d1c52de35a0c59743ef9cf574cd7 firefox-31.2.0-3.el5.centos.i386.rpm
x86_64:
9df05ee668d515f3ece37ee2e4cf518ffef8d1c52de35a0c59743ef9cf574cd7 firefox-31.2.0-3.el5.centos.i386.rpm
fbd203f1998e1dee8e25010a1d4fa29b4b5321d20db4125b985b03a8592346ff firefox-31.2.0-3.el5.centos.x86_64.rpm
Source:
f5201abc4f86e806a1fcb6f85333b750203339111f506ffb2641beb02c3693f4 firefox-31.2.0-3.el5.centos.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos(a)irc.freenode.net
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi,
As most of you already know, there is an important SSLv3 vulnerability
(CVE-2014-3566 - see https://access.redhat.com/articles/1232123) ,
known as Poodle.
While it's easy to disable SSLv3 in the allowed Protocols at the
server level (for example SSLProtocol All -SSLv2 -SSLv3 for apache),
some clients are still defaulting to SSLv3, and Koji does that.
We currently have disabled SSLv3 on our cbs.centos.org koji instance,
so if you're a cbs/koji user, please adapt your local koji package
(local fix !)
At the moment, there is no available upstream package, but the
following patch has been tested by Fedora people too (and credits go
to
https://lists.fedoraproject.org/pipermail/infrastructure/2014-October/01497…)
=====================================================
- --- SSLCommon.py.orig 2014-10-15 11:42:54.747082029 +0200
+++ SSLCommon.py 2014-10-15 11:44:08.215257590 +0200
@@ -37,7 +37,8 @@
if f and not os.access(f, os.R_OK):
raise StandardError, "%s does not exist or is not
readable" % f
- - ctx = SSL.Context(SSL.SSLv3_METHOD) # SSLv3 only
+ #ctx = SSL.Context(SSL.SSLv3_METHOD) # SSLv3 only
+ ctx = SSL.Context(SSL.TLSv1_METHOD) # TLSv1 only
ctx.use_certificate_file(key_and_cert)
ctx.use_privatekey_file(key_and_cert)
ctx.load_client_ca(ca_cert)
@@ -45,7 +46,8 @@
verify = SSL.VERIFY_PEER | SSL.VERIFY_FAIL_IF_NO_PEER_CERT
ctx.set_verify(verify, our_verify)
ctx.set_verify_depth(10)
- - ctx.set_options(SSL.OP_NO_SSLv2 | SSL.OP_NO_TLSv1)
+ #ctx.set_options(SSL.OP_NO_SSLv2 | SSL.OP_NO_TLSv1)
+ ctx.set_options(SSL.OP_NO_SSLv2 | SSL.OP_NO_TLSv1 | SSL.OP_NO_SSLv3)
return ctx
=====================================================
We'll keep you informed about possible upstream koji packages that
would default to at least TLSv1
If you encounter a problem, feel free to drop into #centos-devel
channel on irc.freenode.net and have a chat with us
on behalf of the Infra team,
- --
Fabian Arrotin
The CentOS Project | http://www.centos.org
gpg key: 56BEC54E | twitter: @arrfab
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
iEYEARECAAYFAlQ+TUUACgkQnVkHo1a+xU4JyQCfefp2h7yRdmljBqRc+M76jPTf
z7wAn3dOkaNPNfEnV0pxWDFX7BDDqKuY
=lxsg
-----END PGP SIGNATURE-----
CentOS Errata and Enhancement Advisory 2014:1393
Upstream details at : https://rhn.redhat.com/errata/RHEA-2014-1393.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
i386:
d0d7eaa262746e1760fd3d533b9fa82684ef87bb344b38422946f6b1b81c69c1 kmod-be2iscsi-10.2.273.0r-1.el6_5.i686.rpm
x86_64:
c066e98a14fc3db9b8237d19d3ffef9a62bcb8e063d6f996b166040f2a047bd2 kmod-be2iscsi-10.2.273.0r-1.el6_5.x86_64.rpm
Source:
6d708190df4651c157dd173748290b83bb624071c37e0602540e04a72696d085 be2iscsi-10.2.273.0r-1.el6_5.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos(a)irc.freenode.net
CentOS Errata and Bugfix Advisory 2014:1395
Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-1395.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
i386:
1387ed663fe471b6b1b4c7ace450886b76d8513ca399fa407f91125cf5b6c765 ksh-20120801-10.el6_5.12.i686.rpm
x86_64:
1376e7817bab4dd5b14a4bd2ec56e973d05fbc6367350ceb110a5e39163a7be9 ksh-20120801-10.el6_5.12.x86_64.rpm
Source:
7c1fe6ed97a97af63f4810947c747fd9ec6017ba9dcd7104b6d0c9fe007833fc ksh-20120801-10.el6_5.12.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos(a)irc.freenode.net
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
We have to do some hardware/software maintenance on the machine
actually hosting the Wiki service (http://wiki.centos.org) Instead of
just taking the wiki instance down during that maintenance, we've
decided to relocate it to a temporary host, proceed to maintenance,
and then migrate it back to the previous node.
Migration is scheduled for Friday October 10th, 11:00 am UTC time.
You can convert to local time with $(date -d '2014-10-10 11:00 UTC')
Migration will happen in several steps:
1 - we "freeze" the wiki on the actual node, transfer data, update the
A record, restore the service on the temporary node (disruption ~ 30min)
2 - we proceed to the needed maintenance on first node (no disruption
in service, but no estimated time)
3 - depending on time needed for step [2], and assuming we have no
hardware issue, we proceed like step [1], but in reverse (so
disruption ~30 minutes again)
Thanks for your comprehending and patience.
on behalf of the Infra team,
- --
Fabian Arrotin
The CentOS Project | http://www.centos.org
gpg key: 56BEC54E | twitter: @arrfab
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
iEYEARECAAYFAlQ2g0kACgkQnVkHo1a+xU4flACfc1IjPeHelBntwt4eNTd6SBvM
wXAAnAqtOg4Ko4nqd0QVUfX7ZcQevD5K
=v15z
-----END PGP SIGNATURE-----
CentOS Errata and Bugfix Advisory 2014:1368
Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-1368.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
i386:
380ebf4be76ba9eded6f619366711e01537d705dacca24f7c5592a985bb8d6c2 at-3.1.8-84.el5_11.1.i386.rpm
x86_64:
ba03ad178a7e969747230ed905e4cdb79c4e67202ffbadc4a21fde7438747f98 at-3.1.8-84.el5_11.1.x86_64.rpm
Source:
fa016225f2927a0b81fe40dccc7511de0ad20b12f3a23a5a579f3da3d0c0101f at-3.1.8-84.el5_11.1.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos(a)irc.freenode.net
CentOS Errata and Bugfix Advisory 2014:1363
Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-1363.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
x86_64:
9dd4644ca7404cf3dddad613977b02ee4bca3f003dffda38bd97573b496effd3 at-3.1.13-17.el7_0.1.x86_64.rpm
711dac18746220c0ba7c8636587734a8686e4ff1703219ef0e82df01fadf4ac2 at-sysvinit-3.1.13-17.el7_0.1.x86_64.rpm
Source:
c25678308970744e2bd12c5429ae263d2ee6af1b3ea158f6a3d9c65e74cb2d92 at-3.1.13-17.el7_0.1.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos(a)irc.freenode.net
CentOS Errata and Bugfix Advisory 2014:1362
Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-1362.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
i386:
69ae958a1041c898d7f3ae4127f214ec542db0449626d420b911df9f30193e4f at-3.1.10-44.el6_5.2.i686.rpm
x86_64:
7a409d370df858e752e940f8ce430717322e9e10f9d5e11afdd88b597b0f58bd at-3.1.10-44.el6_5.2.x86_64.rpm
Source:
fa069ec81e4a29c45e19b0f3398b2e65632e90c138da3cf7d313a3b0102f5476 at-3.1.10-44.el6_5.2.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos(a)irc.freenode.net
CentOS Errata and Bugfix Advisory 2014:1361
Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-1361.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
x86_64:
f7206ad3f099f7f3a889e60181de07f22f5a887c58915addb96286b358879dad ethtool-3.8-4.el7_0.x86_64.rpm
Source:
249bf779e0cc6dd9ccbbb33b41d781b3437e23dac7d8f2b2e7018fdc803d652f ethtool-3.8-4.el7_0.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos(a)irc.freenode.net
CentOS Errata and Security Advisory 2014:1359 Important
Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1359.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
x86_64:
469ec506f78304c51f385b054029bc165b4027ca1721f73667ee9151cb89b2a6 polkit-qt-0.103.0-10.el7_0.i686.rpm
c3403ffee586868bc003f85982553a1bc2860caab13339f53454e63e063dea09 polkit-qt-0.103.0-10.el7_0.x86_64.rpm
266e739f8d9d4811ceb304258dc103d759f8d0d3f5518589d14e0aa32bbd8255 polkit-qt-devel-0.103.0-10.el7_0.i686.rpm
5a6972e28e0df36c6a9088179f9cee3d036ba93987d06ab0643e1d4487304ae4 polkit-qt-devel-0.103.0-10.el7_0.x86_64.rpm
5ed37c9af4c75e28771e5fdb0b4e12ccbaaefc95ecbd87decb70a91a5c13f61e polkit-qt-doc-0.103.0-10.el7_0.noarch.rpm
Source:
5ba465a8aeb2c20476d58143742fbfc7510647780340a19d4ecdd77a601ef288 polkit-qt-0.103.0-10.el7_0.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos(a)irc.freenode.net
CentOS Errata and Bugfix Advisory 2014:1356
Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-1356.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
x86_64:
3e4301b534eb11741fb80f5887918e06b0821db1f66e37fe3e957a9d5e9bf761 dhclient-4.2.5-27.el7.centos.2.x86_64.rpm
51fb0535e6774e7039ef4df7f7e75eb207d1e43e99f0eed0c8d93b8bec81ae06 dhcp-4.2.5-27.el7.centos.2.x86_64.rpm
b6a505aede47fce36b74eac93f6872006a62740fc0b2cdc446479033e7cbad8d dhcp-common-4.2.5-27.el7.centos.2.x86_64.rpm
4c05a088cbf3b4863c3dc19e2cae76ed21cff85a13555d226a9fd0c6d7f9c238 dhcp-devel-4.2.5-27.el7.centos.2.i686.rpm
e0237ed75f9677081fdf7c0d34790c2326b9fcd6f2a6833a4e648b28891856b0 dhcp-devel-4.2.5-27.el7.centos.2.x86_64.rpm
9558d6ddf3b9089f47b8a1c3d199c5b8dd9cdef0335004e40e9c4c6ebbce91c7 dhcp-libs-4.2.5-27.el7.centos.2.i686.rpm
ef59a01c7a91817de77a0f4aa9087bcafb1061a3df8027c741b2930c41347c6c dhcp-libs-4.2.5-27.el7.centos.2.x86_64.rpm
Source:
59564ace4f214466eea874f05efcd80b10db1a9c2497d4135783826d7ece57a0 dhcp-4.2.5-27.el7.centos.2.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos(a)irc.freenode.net
CentOS Errata and Enhancement Advisory 2014:1355
Upstream details at : https://rhn.redhat.com/errata/RHEA-2014-1355.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
x86_64:
ff21b78082b95850edb4958a82f95265ae7ce15cee4f61408bc9b6a8189b8636 tzdata-2014h-1.el7.noarch.rpm
ae1db34fc4cc85fe92ea78fb5c0303bcae86d689973dd35ea6d87160e5cc4a84 tzdata-java-2014h-1.el7.noarch.rpm
Source:
4b8d36b1b425e314fc1ebdbca475fc8899eb588b40fda4cfd29d75648cf91360 tzdata-2014h-1.el7.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos(a)irc.freenode.net
CentOS Errata and Enhancement Advisory 2014:1355
Upstream details at : https://rhn.redhat.com/errata/RHEA-2014-1355.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
i386:
5dd343cbd6b2c315f5c037d8229b80c02c29228c25b6481e9aafa5eac224bd4c tzdata-2014h-2.el5.i386.rpm
54930f1954727524b2a65c2678772a6dd67d54ed94e5dc4a8619805da4d82171 tzdata-java-2014h-2.el5.i386.rpm
x86_64:
b302b440d1cbd0b8ca882acb65931b9e8b671cab2864dfb794d94af80a629264 tzdata-2014h-2.el5.x86_64.rpm
a0a377edcba02c6341320381b4ea8c59ff723f94c0eac760e90b6bbe8657f4a9 tzdata-java-2014h-2.el5.x86_64.rpm
Source:
46e17f84bff87914df35157a8aaa928a7c88e9a6ff25400ee4c276a7c20768ce tzdata-2014h-2.el5.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos(a)irc.freenode.net
CentOS Errata and Enhancement Advisory 2014:1355
Upstream details at : https://rhn.redhat.com/errata/RHEA-2014-1355.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
i386:
8478a7a8c207e68435859480f155e86325841242aefbb31a9f9171cf01f394fa tzdata-2014h-1.el6.noarch.rpm
c9aa98d2cb42be7efdd49f5268a9d268a3195df83a45477080aa65995c413f50 tzdata-java-2014h-1.el6.noarch.rpm
x86_64:
8478a7a8c207e68435859480f155e86325841242aefbb31a9f9171cf01f394fa tzdata-2014h-1.el6.noarch.rpm
c9aa98d2cb42be7efdd49f5268a9d268a3195df83a45477080aa65995c413f50 tzdata-java-2014h-1.el6.noarch.rpm
Source:
66a194c5537755201e4a510d251303e2e4bbdac0e1f49911a6e6d583e5100d10 tzdata-2014h-1.el6.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos(a)irc.freenode.net
CentOS Errata and Bugfix Advisory 2014:1334
Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-1334.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
x86_64:
a0079faa6e0cd1829fdd43da437d6673aa1e6f4f1310e8452c1f7cd7e29668e6 xz-5.1.2-9alpha.el7.x86_64.rpm
d4e97054a812beccffb9f5d81d8b05a9733dbcfd02708cf195deb49820595a6b xz-compat-libs-5.1.2-9alpha.el7.i686.rpm
b455939a21d7df36de4666748e0b2f6f73ee77b99e9733d01f1a8c50ed58f79b xz-compat-libs-5.1.2-9alpha.el7.x86_64.rpm
05dd562e539ede1cae01c7d936fd9d16f8047b021a951de42fef0109bbaf02b6 xz-devel-5.1.2-9alpha.el7.i686.rpm
9d040dba58abe0e5ef8789f7e55295ed835fff3bf5b32d03554e22e78fa77157 xz-devel-5.1.2-9alpha.el7.x86_64.rpm
83aebf197819eb248b5c2bbb96a61e511924e472360eb7dff6d39af740149ecb xz-libs-5.1.2-9alpha.el7.i686.rpm
e778ea132c925e46d093c01ffbb37395d9f800da00b2a96973545b3edbe28352 xz-libs-5.1.2-9alpha.el7.x86_64.rpm
79be81ad52214b3a4ff33047c62330b8fce438adc1b819d9f45d77783034ea7c xz-lzma-compat-5.1.2-9alpha.el7.x86_64.rpm
Source:
7865e0bfbe79a0df2504a4c2d35cc9dd1d546c952884cac149b5f2741bba4817 xz-5.1.2-9alpha.el7.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos(a)irc.freenode.net
CentOS Errata and Security Advisory 2014:X013 (Xen4CentOS)
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
-----------------------------
X86_64
-----------------------------
7bdc9b1e50859e38f1a87d58c79b53d3fc428d102c3b7a1645c07e576927407c xen-4.2.5-34.el6.centos.alt.x86_64.rpm
ae27e1c510701c53459a61573a2f0cbcc06d543ddb995bcc35bc1f66f2e34298 xen-debuginfo-4.2.5-34.el6.centos.alt.x86_64.rpm
8a054f6de1d5c558546936bf90c0b4a9298a2b884c159018c1d4bfa14ac7c80d xen-devel-4.2.5-34.el6.centos.alt.x86_64.rpm
4363e339fa39e4b1b09d2beceb5d50e218dca4ef2a44520763f7eb7d73e8493a xen-doc-4.2.5-34.el6.centos.alt.x86_64.rpm
e84a36c1d483aedd758ebcb17a557748bc148b2685e4aa182888a171fa6952cc xen-hypervisor-4.2.5-34.el6.centos.alt.x86_64.rpm
b5cce0368cfa87df7744c81b0a3f76227a65d9aca27f8e27e0bd019e87e82103 xen-libs-4.2.5-34.el6.centos.alt.x86_64.rpm
4f3facba07e91ed5a1c5d1f2cc0db304d18ec9b09c18230e43ad73e82819a148 xen-licenses-4.2.5-34.el6.centos.alt.x86_64.rpm
6f6922cc7f842bc20652b8b8645bda61c14e62934113b4ed958527d045a1bbdb xen-ocaml-4.2.5-34.el6.centos.alt.x86_64.rpm
9513992c084c13f4050a09fc4fe83ec3ccdd8820ac999701205389cb3fdad5b6 xen-ocaml-devel-4.2.5-34.el6.centos.alt.x86_64.rpm
99faa9057ebd0d608971169c87f50038c7dfcceb540551f05a556ed16f873c56 xen-runtime-4.2.5-34.el6.centos.alt.x86_64.rpm
-----------------------------
Source:
-----------------------------
16de798571224461ea2dff22c1329f1299dc6b274d21471c299f510983894468 xen-4.2.5-34.el6.centos.alt.src.rpm
=====================================================
xen Changelog info from the SPEC file:
* Wed Oct 01 2014 Johnny Hughes <johnny(a)centos.org> - 4.2.5-34.el6.centos
- Roll in Patch209 (XSA-108, CVE-2014-7188)
=====================================================
The following Release info is available from the Xen site regarding XSAs:
http://xenbits.xen.org/xsa/advisory-108.html
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos at irc.freenode.net