Discuss December 2021

discuss@lists.centos.org

44 participants
38 discussions

log4j cve
by Steve Clark 15 Dec '21

15 Dec '21

Hi List, I see on CentOS 7 it has log4j-1.2.17... Is ok 2 use. I know the CVE was against 2.0 fwd but not knowing if something was backported to 1.2 ? Thanks, Steve -- Stephen Clark NetWolves Managed Services, LLC. Sr. Applications Architect Email Confidentiality Notice: The information contained in this transmission may contain privileged and confidential and/or protected health information (PHI) and may be subject to protection under the law, including the Health Insurance Portability and Accountability Act of 1996, as amended (HIPAA). This transmission is intended for the sole use of the individual or entity to whom it is addressed. If you are not the intended recipient, you are notified that any use, dissemination, distribution, printing or copying of this transmission is strictly prohibited and may subject you to criminal or civil penalties. If you have received this transmission in error, please contact the sender immediately and delete this email and any attachments from any computer. Vaso Corporation and its subsidiary companies are not responsible for data leaks that result from email messages received that contain privileged and confidential and/or protected health information (PHI).

7 9

CentOS 9-stream "CRB" repo
by Chris Adams 15 Dec '21

15 Dec '21

I'm starting to look at CentOS 9-stream... what is the CRB repo? It appears to be a lot of development libraries and such, but I didn't see a definition or "CRB" anywhere. -- Chris Adams <linux(a)cmadams.net>

3 2

something is hammering non-existant floppy
by Jon LaBadie 13 Dec '21

13 Dec '21

On my CentOS7 system, I'm getting message sequences in /var/log/message and in the journal that are nearly identical to the sequence below. They come in multiple times per second. I've deleted the timestamps and system name from the messages. kernel: floppy0: Getstatus times out (0) on fdc 0 kernel: kernel: floppy driver state kernel: ------------------- kernel: now=4476158515 last interrupt=4476158452 diff=63 last called handler=reset_interrupt [floppy] kernel: timeout_message=floppy start kernel: last output bytes: kernel: 8 81 4388061306 kernel: 3 80 4388061326 kernel: d1 90 4388061326 kernel: a 90 4388061326 kernel: 7 90 4388061326 kernel: 0 90 4388061326 kernel: 8 81 4388061730 kernel: 3 80 4388061751 kernel: c1 90 4388061751 kernel: 10 90 4388061751 kernel: 7 80 4388061751 kernel: 0 90 4388061751 kernel: 8 81 4388062074 kernel: 7 80 4388062075 kernel: 0 90 4388062075 kernel: 8 81 4388062399 kernel: 8 80 4402157917 kernel: 8 80 4402213377 kernel: 8 80 4476158452 kernel: 12 80 4476158471 kernel: last result at 4476158452 kernel: last redo_fd_request at 4476158471 kernel: status=0 kernel: fdc_busy=1 kernel: timer_function=ffffffffc01daf70 expires=2957 kernel: cont=ffffffffc01dc400 kernel: current_req=ffff9b0e72239c80 kernel: command_status=-1 kernel: I persume something is trying to access the system's floppy disk drive that does not exist. But I have been unable to identify what's triggering all this activity. Any suggestions? Jon -- Jon H. LaBadie jcu(a)labadie.us

3 4

C9S
by Fred 11 Dec '21

11 Dec '21

Hi! I'm experimenting with C9 Stream, in Virtualbox. I'm hoping someone, somewhere, will provide the Mate desktop for it. I positively cannot stand that Gnome thing that they think we should all be using. I've installed C9 and C9S for epel but they don't have it (yet??) either. Anyone know where I can find it? Thanks in advance! Fred

1 0

Roundcube 1.4.12 on CentOS 8
by Gionatan Danti 10 Dec '21

10 Dec '21

Hi all, I recently updated a CentOS 8 machine to roundcubemail-1.4.12 (from 1.4.11) using remi's repo. I needed to explictly exclude the 1.5.0 packages because it was "shadowing" the latest 1.4.12 release. But now I can not see the 1.4.12 packages anymore - only 1.5.x are provided. Does anyone know why the previous stable package disappeared from remi's repo? Thanks. -- Danti Gionatan Supporto Tecnico Assyoma S.r.l. - www.assyoma.it email: g.danti(a)assyoma.it - info(a)assyoma.it GPG public key ID: FF5F32A8

2 2

rpcbind fails to start with IPv6 disabled
by Jack Bailey 09 Dec '21

09 Dec '21

Hello, Does anyone know if this is still an issue? https://access.redhat.com/solutions/2798411 rpcbind fails to start with IPv6 disabled - Red Hat Customer Portal On RHEL7.3 and later with IPv6 disabled, rpcbind fails to start... Thanks, Jack

1 0

Daily Logwatch (Postfix) email being reported as spam
by Jay Hart 09 Dec '21

09 Dec '21

Hi All!!! This issue is a bit beyond my knowledge level/area. Spamassassin is tagging my logwatch emails as spam. The emails range in scores from 3.53 to 6.728. Amavisd is set to 'kill/quarantine' spam that scores 3.14 or higher, and I receive several each day. Note: all other emails that are scored at 3.14 or higher ARE true SPAM. I've checked this out. I know this is caused by the the blacklist checks shown below. What I don't know 'exactly' how to do, is solve this. Example header from one of my emails: Return-Path: <> Delivered-To: spam-quarantine X-Envelope-From: <root(a)kevla.org> X-Envelope-To: <jhart(a)kevla.org> X-Envelope-To-Blocked: <jhart(a)kevla.org> X-Quarantine-ID: <NnUN20KoPwXR> X-Spam-Flag: YES X-Spam-Score: 4.731 X-Spam-Level: **** X-Spam-Status: Yes, score=4.731 tag=2 tag2=3.14 kill=3.14 tests=[NO_RELAYS=-0.001, URIBL_ABUSE_SURBL=1.948, URIBL_BLACK=1.7, URIBL_GREY=1.084] autolearn=no autolearn_force=no What I have done to resolve: I whitelisted the following email addresses/servers: # more /etc/postfix/rbl_allow kevla.org OK # this is the server root(a)kevla.org OK jhart(a)kevla.org OK Modified the following in main.cf: smtpd_client_restrictions = check_client_access hash:/etc/postfix/rbl_allow, permit_mynetworks, permit_sasl_authenticated, reject_unknown_client, permit smtpd_sender_restrictions = check_client_access hash:/etc/postfix/rbl_allow ran 'postmap /etc/postfix/rbl_allow' and restarted the postfix and amavisd services. I was hoping this would resolve but it didn't. For the above URIBL scores, I can see the following scores set in 50_scores.cf. score URIBL_GREY 0 1.084 0 0.424 # n=0 n=2 score URIBL_ABUSE_SURBL 0 1.948 0 1.250 # n=0 n=2 score URIBL_BLACK 0 1.7 0 1.7 # n=0 n=2 Since the URIBL list could be used to detect true legitimate spam, I don't think I want to commit those checks out, at least that doesn't make sense to me. I am at a loss as what the next step is. Should/Could I modify the scores for these associated BLs in 50_scores, and if so, how does one go about setting those? I have been looking to determine how to do this. This would possibly help me without just blocking those BL checks. Also, in Centos 8, what 'runs' the logwatch summary? Assume this is pflogsumm. Does this have a config file for options to tweak the output? I do not have Logwatch analyzer package installed. I have the postfix-perl-scripts package installed. I can't see what kicks this off at night... Lastly, those 'autolearn' and 'autolearn_force' options mentioned in the email header above. Are those configurable to setup (ie set to yes) and again, how to do that, and why would I? Thank you for your time. Jay

2 1

email address
by Wells, Roger K. [US-US] 08 Dec '21

08 Dec '21

How to change email address for this list? current: roger.k.wells(a)leidos.com change to: roger.k.wells(a)alum.mit.edu I've tried several times but so far nothing has worked. thx Roger Wells, P.E. leidos 221 Third St Newport, RI 02840 401-847-4210 (voice) 401-849-1585 (fax)

4 3

CentOS-announce Digest, Vol 200, Issue 4
by centos-announce-request＠centos.org 07 Dec '21

07 Dec '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2021:4904 Critical CentOS 7 nss Security Update (Johnny Hughes) 2. CEBA-2021:4797 CentOS 7 qemu-kvm BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 6 Dec 2021 16:52:37 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:4904 Critical CentOS 7 nss Security Update Message-ID: <20211206165237.GA28175(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:4904 Critical Upstream details at : https://access.redhat.com/errata/RHSA-2021:4904 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 62dcb9c05fcad8a7e7f0588dcf5a7500f9fb5e4b2cf0250f64430bd3a95b42f8 nss-3.67.0-4.el7_9.i686.rpm 4631ab28c6b9c4fb1461b0f98b9c1de4c06d08fc1e07b0e42d44f966c8d31507 nss-3.67.0-4.el7_9.x86_64.rpm d1faf007d61466191ae5ad07935839a8673f5e51b6c24bd3465e5503da56f20b nss-devel-3.67.0-4.el7_9.i686.rpm c8da0723eb57ace188d0bd03e37e8827a42913c10542cfa8bd6bd8817a724916 nss-devel-3.67.0-4.el7_9.x86_64.rpm 821ad7280fd9322e235862f73d1cb6c433fe48e14911cbc39141b2df2732bc01 nss-pkcs11-devel-3.67.0-4.el7_9.i686.rpm feb6b437532dab8f5310701ed22fb3134f9e87f87fd7786802bcadba0cdeb3d6 nss-pkcs11-devel-3.67.0-4.el7_9.x86_64.rpm 56f07c39bdea546bc3f3eb930711eb7562fbf0cd8fbcbd9f5e3f7fae8dbf2013 nss-sysinit-3.67.0-4.el7_9.x86_64.rpm e649737e5bf6a5d2b0bb6c20cbdfd046ba295e9f79765fec2800f61f3d408ac0 nss-tools-3.67.0-4.el7_9.x86_64.rpm Source: a3ee82f50a9657766a129497fc125bbf6af82642c5a3dcb4e8c90d08f5075456 nss-3.67.0-4.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)libera.chat Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Mon, 6 Dec 2021 16:53:40 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2021:4797 CentOS 7 qemu-kvm BugFix Update Message-ID: <20211206165340.GA28325(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2021:4797 Upstream details at : https://access.redhat.com/errata/RHBA-2021:4797 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: a56bfb4be6763b8f94a45cd667d3d9e26cc48d8d10f46fa025a15f345484167b qemu-img-1.5.3-175.el7_9.5.x86_64.rpm 4c928cbb9b34a074f2c249f56cfc152f8e285cd974e184b9f5ee05214cbecd42 qemu-kvm-1.5.3-175.el7_9.5.x86_64.rpm 8a1a847b55b0f0c7eb4ee01caaddbacba34459dac20fbc69bf3e33941d234f40 qemu-kvm-common-1.5.3-175.el7_9.5.x86_64.rpm 7b7ec44f73e60f1826d6c1d04e2dd0dcdf55c7db06718558d74313208c397656 qemu-kvm-tools-1.5.3-175.el7_9.5.x86_64.rpm Source: 4036d4578e8287f8befe54308e8fc4af01359744e3335e2a2505951361423282 qemu-kvm-1.5.3-175.el7_9.5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)libera.chat Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 200, Issue 4 ***********************************************

1 0

selinux modules compat
by Leon Fauster 07 Dec '21

07 Dec '21

Hey, after some time not touching any selinux config, I wonder about the bin format of selinux modules. Theoretically question: When I compile some selinux modules on my workstation (el8). Are these modules (forward/backward) compatible for usage on other EL major releases? EL8 mod --deploy2--> EL6, EL7, EL9 -- Thanks, Leon

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss December 2021