- announce - lists.centos.org

CESA-2008:0839 Moderate CentOS 4 ia64 postfix - security update
by Pasi Pirhonen 23 Aug '08

23 Aug '08

CentOS Errata and Security Advisory 2008:0839 https://rhn.redhat.com/errata/RHSA-2008-0839.html The following updated files have been uploaded and are currently syncing to the mirrors: ia64: updates/ia64/RPMS/postfix-2.2.10-1.2.1.c4.ia64.rpm updates/ia64/RPMS/postfix-pflogsumm-2.2.10-1.2.1.c4.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

CESA-2008:0836 Moderate CentOS 4 ia64 libxml2 - security update
by Pasi Pirhonen 23 Aug '08

23 Aug '08

CentOS Errata and Security Advisory 2008:0836 https://rhn.redhat.com/errata/RHSA-2008-0836.html The following updated files have been uploaded and are currently syncing to the mirrors: ia64: updates/ia64/RPMS/libxml2-2.6.16-12.2.ia64.rpm updates/ia64/RPMS/libxml2-devel-2.6.16-12.2.ia64.rpm updates/ia64/RPMS/libxml2-python-2.6.16-12.2.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

CESA-2008:0839 Moderate CentOS 3 ia64 postfix - security update
by Pasi Pirhonen 23 Aug '08

23 Aug '08

CentOS Errata and Security Advisory 2008:0839 https://rhn.redhat.com/errata/RHSA-2008-0839.html The following updated files have been uploaded and are currently syncing to the mirrors: ia64: updates/ia64/RPMS/postfix-2.0.16-14.1.RHEL3.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

CESA-2008:0836 Moderate CentOS 3 ia64 libxml2 - security update
by Pasi Pirhonen 23 Aug '08

23 Aug '08

CentOS Errata and Security Advisory 2008:0836 https://rhn.redhat.com/errata/RHSA-2008-0836.html The following updated files have been uploaded and are currently syncing to the mirrors: ia64: updates/ia64/RPMS/libxml2-2.5.10-10.ia64.rpm updates/ia64/RPMS/libxml2-devel-2.5.10-10.ia64.rpm updates/ia64/RPMS/libxml2-python-2.5.10-10.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

CentOS position on systems intrusion at Red Hat
by Karanbir Singh 22 Aug '08

22 Aug '08

Earlier in the day today Red Hat made an announcement [1] that there had been an intrusion into some of their computer systems last week. In the same announcement they mention that some of the packages for OpenSSH on RHEL-4 ( i386 and x86_64 ) as well as RHEL-5 ( x86_64 ) were signed by the intruder. In their announcement they also clarified that they were confident that none of these, potentially compromised, packages made their way into or through RHN to client and customer machines. As a security measure a script [3] was made available along with a semi-detailed description of the issue [2]. We take security issues very seriously, and as soon as we were made aware of the situation I undertook a complete audit of the entire CentOS4/5 Build and Signing infrastructure. We can now assure everyone that no compromise has taken place anywhere within the CentOS Infrastructure. Our entire setup is located behind multiple firewalls, and only accessible from a very small number of places, by only a few people. Also included in this audit were all entry points to the build services, signing machines, primary release machines and connectivity between all these hosts. Since OpenSSH is a critical component of any Linux machine, we considered it essential to audit the last two released package sets ( openssh-4.3p2-26.el5.src.rpm, openssh-4.3p2-26.el5_2.1.src.rpm ). I have just finished this code audit, and can assure everyone that there is no compromised code included in either of these packages. A similar check is also being done for the CentOS-4 sources. Packages released today, by upstream, ( based on : openssh-4.3p2-26.el5_2.1.src.rpm, openssh-3.9p1-11.el4_7.src.rpm ) address two issues. Firstly they contain a fix for http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4752 . And secondly, in the remote event that someone had indeed got compromised packages via RHN, their packages would get updated to a known good state. We wanted to get these packages out right away to address the first issue, and also to cover users converting non updated RHEL installs to CentOS in the next few weeks/months. Release of these packages into the mirror.centos.org network does *not* imply that CentOS users are affected by the intrusion at Red Hat. Finally, while we feel confident that there is no possibility of this compromise having been passed onto the CentOS userbase, we still encourage users to verify their packages independently using whatever resources they might have available. -- [1]: https://rhn.redhat.com/errata/RHSA-2008-0855.html [2]: http://www.redhat.com/security/data/openssh-blacklist.html [3]: https://www.redhat.com/security/data/openssh-blacklist-1.0.sh :Its important to note that this script *only* checks for packages built within Red Hat, and will *not* be a reliable source of verification on CentOS since we rebuild from sources, using no Red Hat binary. -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net

1 0

CESA-2008:0855 Critical CentOS 5 x86_64 openssh Update
by Karanbir Singh 22 Aug '08

22 Aug '08

CentOS Errata and Security Advisory 2008:0855 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0855.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 161c953e8c1c47c09542020837e9920b openssh-4.3p2-26.el5_2.1.x86_64.rpm 12b02fb6e6d1e8354539cd4cba304803 openssh-askpass-4.3p2-26.el5_2.1.x86_64.rpm c281a62dc3c21f1225ea309757b755d1 openssh-clients-4.3p2-26.el5_2.1.x86_64.rpm 01b3486f17ecb4adc7c59074525b7fd9 openssh-server-4.3p2-26.el5_2.1.x86_64.rpm Source: 278cfb304350f3604fb64ebaee3f1b77 openssh-4.3p2-26.el5_2.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net

1 0

CESA-2008:0855 Critical CentOS 5 i386 openssh Update
by Karanbir Singh 22 Aug '08

22 Aug '08

CentOS Errata and Security Advisory 2008:0855 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0855.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: d45c32890088d835ce8bc4a569173775 openssh-4.3p2-26.el5_2.1.i386.rpm 7f8194567e7797d834c22090d9c55b69 openssh-askpass-4.3p2-26.el5_2.1.i386.rpm c145d732591711659b5fe756a4e9a085 openssh-clients-4.3p2-26.el5_2.1.i386.rpm 2b1fdc9b245f2c8cd873ea7f8e3b900c openssh-server-4.3p2-26.el5_2.1.i386.rpm Source: 278cfb304350f3604fb64ebaee3f1b77 openssh-4.3p2-26.el5_2.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net

1 0

CESA-2008:0818 Moderate CentOS 5 i386 hplip Update
by Karanbir Singh 15 Aug '08

15 Aug '08

CentOS Errata and Security Advisory 2008:0818 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0818.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 12ed57905be0034361f4357f7ebfb580 postfix-2.3.3-2.1.el5_2.i386.rpm 5f45b128714174964caf8b5633d9723f postfix-pflogsumm-2.3.3-2.1.el5_2.i386.rpm Source: bf3130ae011fc9d69bcd43a8c29d4811 postfix-2.3.3-2.1.el5_2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net

1 1

CESA-2008:0818 Moderate CentOS 5 x86_64 hplip Update
by Karanbir Singh 15 Aug '08

15 Aug '08

CentOS Errata and Security Advisory 2008:0818 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0818.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: cfcd76e57b844ea28a53de43f9262cb4 postfix-2.3.3-2.1.el5_2.x86_64.rpm 7bebb4b9264b5ceac8c736c75a95155b postfix-pflogsumm-2.3.3-2.1.el5_2.x86_64.rpm Source: bf3130ae011fc9d69bcd43a8c29d4811 postfix-2.3.3-2.1.el5_2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net

1 1

CESA-2008:0839 Moderate CentOS 5 x86_64 postfix Update
by Karanbir Singh 15 Aug '08

15 Aug '08

CentOS Errata and Security Advisory 2008:0839 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0839.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: cfcd76e57b844ea28a53de43f9262cb4 postfix-2.3.3-2.1.el5_2.x86_64.rpm 7bebb4b9264b5ceac8c736c75a95155b postfix-pflogsumm-2.3.3-2.1.el5_2.x86_64.rpm Source: bf3130ae011fc9d69bcd43a8c29d4811 postfix-2.3.3-2.1.el5_2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net

1 0

CESA-2008:0839 Moderate CentOS 5 i386 postfix Update
by Karanbir Singh 15 Aug '08

15 Aug '08

CentOS Errata and Security Advisory 2008:0839 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0839.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 12ed57905be0034361f4357f7ebfb580 postfix-2.3.3-2.1.el5_2.i386.rpm 5f45b128714174964caf8b5633d9723f postfix-pflogsumm-2.3.3-2.1.el5_2.i386.rpm Source: bf3130ae011fc9d69bcd43a8c29d4811 postfix-2.3.3-2.1.el5_2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net

1 0

CESA-2008:0839 Moderate CentOS 3 x86_64 postfix - security update
by Tru Huynh 15 Aug '08

15 Aug '08

CentOS Errata and Security Advisory CESA-2008:0839 postfix security update for CentOS 3 x86_64: https://rhn.redhat.com/errata/RHSA-2008-0839.html The following updated file has been uploaded and is currently syncing to the mirrors: x86_64: updates/x86_64/RPMS/postfix-2.0.16-14.1.RHEL3.x86_64.rpm source: updates/SRPMS/postfix-2.0.16-14.1.RHEL3.src.rpm You may update your CentOS-3 x86_64 installations by running the command: yum update postfix Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

CESA-2008:0839 Moderate CentOS 3 i386 postfix - security update
by Tru Huynh 15 Aug '08

15 Aug '08

CentOS Errata and Security Advisory CESA-2008:0839 postfix security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2008-0839.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/postfix-2.0.16-14.1.RHEL3.i386.rpm source: updates/SRPMS/postfix-2.0.16-14.1.RHEL3.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update postfix Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

CEBA-2008:0824 CentOS 5 i386 strace Update
by Karanbir Singh 11 Aug '08

11 Aug '08

CentOS Errata and Bugfix Advisory 2008:0824 Upstream details at : https://rhn.redhat.com/errata/RHBA-2008-0824.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: dba0f8d0a2aca6aca15bd81d63a0b295 strace-4.5.16-1.el5_2.2.i386.rpm Source: 4f46275678d5a11a8d8ceacd3d9c241a strace-4.5.16-1.el5_2.2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net

1 0

CEBA-2008:0824 CentOS 5 x86_64 strace Update
by Karanbir Singh 11 Aug '08

11 Aug '08

CentOS Errata and Bugfix Advisory 2008:0824 Upstream details at : https://rhn.redhat.com/errata/RHBA-2008-0824.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 288c7979157a76555734c4dd532803cf strace-4.5.16-1.el5_2.2.x86_64.rpm Source: 4f46275678d5a11a8d8ceacd3d9c241a strace-4.5.16-1.el5_2.2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net

1 0

CESA-2008:0612 Important CentOS 5 x86_64 kernel Update
by Karanbir Singh 06 Aug '08

06 Aug '08

CentOS Errata and Security Advisory 2008:0612 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0612.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 1457356856ffe82848877a6f08457dea kernel-2.6.18-92.1.10.el5.x86_64.rpm 7cd3f0234fb117b11298281bdb5f4d0c kernel-debug-2.6.18-92.1.10.el5.x86_64.rpm c79e31719719d3b732f0f62248c2186e kernel-debug-devel-2.6.18-92.1.10.el5.x86_64.rpm ff0631c0ff8325ae2162ee811090193a kernel-devel-2.6.18-92.1.10.el5.x86_64.rpm b1d78ee9d4a2b15052584d1a55733325 kernel-doc-2.6.18-92.1.10.el5.noarch.rpm 53917fdfdbabc3e34983b9cf073983ae kernel-headers-2.6.18-92.1.10.el5.x86_64.rpm 3726883410bb2de3d7b124bf68439e72 kernel-xen-2.6.18-92.1.10.el5.x86_64.rpm a8ce18b06b43a0e586347ba5e9f0ad8c kernel-xen-devel-2.6.18-92.1.10.el5.x86_64.rpm Source: 1b05a0525efa915022c16d741764325e kernel-2.6.18-92.1.10.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net

1 0

CESA-2008:0612 Important CentOS 5 i386 kernel Update
by Karanbir Singh 06 Aug '08

06 Aug '08

CentOS Errata and Security Advisory 2008:0612 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0612.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 0e96a5c5648375bca4f54f290d3a2247 kernel-2.6.18-92.1.10.el5.i686.rpm 5336a850aa30b5a55cdb3788a14a9f28 kernel-debug-2.6.18-92.1.10.el5.i686.rpm 3c78e714d11c2c2b6910cdcc47a694bf kernel-debug-devel-2.6.18-92.1.10.el5.i686.rpm 1404c810d7571d722436fba2dbe86445 kernel-devel-2.6.18-92.1.10.el5.i686.rpm f4990d57aed66cd66b86cb0193032981 kernel-doc-2.6.18-92.1.10.el5.noarch.rpm bc9b2a65df26736b6dfd8ed731f50209 kernel-headers-2.6.18-92.1.10.el5.i386.rpm 5aa251d478ff3d43fae595e008087f0a kernel-PAE-2.6.18-92.1.10.el5.i686.rpm d76a3f8d837b82f0ddb3d9b06537898f kernel-PAE-devel-2.6.18-92.1.10.el5.i686.rpm 4a0c9a6c14ade7cbf7e2701cfdfa22a8 kernel-xen-2.6.18-92.1.10.el5.i686.rpm 743d9f204512f83a73e46ae126733371 kernel-xen-devel-2.6.18-92.1.10.el5.i686.rpm Source: 1b05a0525efa915022c16d741764325e kernel-2.6.18-92.1.10.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net

1 0

CESA-2008:0486 Moderate CentOS 5 i386 nfs-utils Update
by Johnny Hughes 31 Jul '08

31 Jul '08

CentOS Errata and Security Advisory 2008:0486 Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0486.html The following updated files have been uploaded and are currently syncing to the mirrors: i386: nfs-utils-1.0.9-35z.el5_2.i386.rpm src: nfs-utils-1.0.9-35z.el5_2.src.rpm

1 0

CESA-2008:0486 Moderate CentOS 5 x86_64 nfs-utils Update
by Johnny Hughes 31 Jul '08

31 Jul '08

CentOS Errata and Security Advisory 2008:0486 Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0486.html The following updated files have been uploaded and are currently syncing to the mirrors: x86_64: nfs-utils-1.0.9-35z.el5_2.x86_64.rpm src: nfs-utils-1.0.9-35z.el5_2.src.rpm

1 0

CESA-2008:0649 Moderate CentOS 5 x86_64 libxslt Update
by Johnny Hughes 31 Jul '08

31 Jul '08

CentOS Errata and Security Advisory 2008:0649 Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0649.html The following updated files have been uploaded and are currently syncing to the mirrors: x86_64: libxslt-1.1.17-2.el5_2.2.i386.rpm libxslt-1.1.17-2.el5_2.2.x86_64.rpm libxslt-devel-1.1.17-2.el5_2.2.i386.rpm libxslt-devel-1.1.17-2.el5_2.2.x86_64.rpm libxslt-python-1.1.17-2.el5_2.2.x86_64.rpm src: libxslt-1.1.17-2.el5_2.2.src.rpm

1 0

CESA-2008:0649 Moderate CentOS 5 i386 libxslt Update
by Johnny Hughes 31 Jul '08

31 Jul '08

CentOS Errata and Security Advisory 2008:0649 Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0649.html The following updated files have been uploaded and are currently syncing to the mirrors: i386: libxslt-1.1.17-2.el5_2.2.i386.rpm libxslt-devel-1.1.17-2.el5_2.2.i386.rpm libxslt-python-1.1.17-2.el5_2.2.i386.rpm src: libxslt-1.1.17-2.el5_2.2.src.rpm

1 0

CESA-2008:0649 Moderate CentOS 4 ia64 libxslt - security update
by Pasi Pirhonen 31 Jul '08

31 Jul '08

CentOS Errata and Security Advisory 2008:0649 https://rhn.redhat.com/errata/RHSA-2008-0649.html The following updated files have been uploaded and are currently syncing to the mirrors: ia64: updates/ia64/RPMS/libxslt-1.1.11-1.c4.2.ia64.rpm updates/ia64/RPMS/libxslt-devel-1.1.11-1.c4.2.ia64.rpm updates/ia64/RPMS/libxslt-python-1.1.11-1.c4.2.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

CESA-2008:0649 Moderate CentOS 4 s390(x) libxslt - security update
by Pasi Pirhonen 31 Jul '08

31 Jul '08

CentOS Errata and Security Advisory 2008:0649 https://rhn.redhat.com/errata/RHSA-2008-0649.html The following updated files have been uploaded and are currently syncing to the mirrors: s390: updates/s390/RPMS/libxslt-1.1.11-1.c4.2.s390.rpm updates/s390/RPMS/libxslt-devel-1.1.11-1.c4.2.s390.rpm updates/s390/RPMS/libxslt-python-1.1.11-1.c4.2.s390.rpm s390x: updates/s390x/RPMS/libxslt-1.1.11-1.c4.2.s390x.rpm updates/s390x/RPMS/libxslt-devel-1.1.11-1.c4.2.s390x.rpm updates/s390x/RPMS/libxslt-python-1.1.11-1.c4.2.s390x.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

CESA-2008:0616 Moderate CentOS 4 s390(x) thunderbird - security update
by Pasi Pirhonen 27 Jul '08

27 Jul '08

CentOS Errata and Security Advisory 2008:0616 https://rhn.redhat.com/errata/RHSA-2008-0616.html The following updated files have been uploaded and are currently syncing to the mirrors: s390: updates/s390/RPMS/thunderbird-1.5.0.12-14.el4.centos.s390.rpm s390x: updates/s390x/RPMS/thunderbird-1.5.0.12-14.el4.centos.s390x.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

CESA-2008:0616 Moderate CentOS 4 ia64 thunderbird - security update
by Pasi Pirhonen 26 Jul '08

26 Jul '08

CentOS Errata and Security Advisory 2008:0616 https://rhn.redhat.com/errata/RHSA-2008-0616.html The following updated files have been uploaded and are currently syncing to the mirrors: ia64: updates/ia64/RPMS/thunderbird-1.5.0.12-14.el4.centos.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

announce