Discuss

discuss@lists.centos.org

34758 discussions

Exploit 'in the wild' for Trixbox
by Nigel Kendrick 20 Jul '08

20 Jul '08

Just in case anyone else needs to know - there's an exploit 'in the wild' for Trixbox (which is CentOS based) that allows malicious code to be installed on a server. I discovered that one of my Trixbox servers was running 3 instances of a perl-based IRC botnet process called httpdse and this was pegging the CPU at 100%. Notes, comments, removal instructions, patches etc. here: http://trixbox.org/forums/trixbox-forums/open-discussion/critical-remote-roo t-exploit-trixbox-wild Guess that teaches me not to open the Trixbox Web interface to the world. Regards, Nigel Kendrick

1 0

Plone
by David Hláčik 20 Jul '08

20 Jul '08

Hello, is someone using Plone on CentOs 5.2? What is the best way to install lastest version? Using their unified installer? Thanks in advance! D.

2 2

Disable hid debug
by Mag Gam 20 Jul '08

20 Jul '08

Just compiled a kernel. And I have hid-debug enabled. Whenever I move the mouse or type anything on the keyboard I get all action messages on the console. How can I disable this? TIA

1 0

CD Vendors List Submission
by David Latham 19 Jul '08

19 Jul '08

Hi CentOS List, I was wondering if the "cdvendors(a)centos.org" is still being looked after. I submitted a request to have my on-line store added about a month ago but heard nothing back. Have recently resubmitted my request and, although I haven't waited all that long, I thought I would ask the question here. Thanks for your time, Regards David Latham http://www.thelinuxcdstore.com

1 0

CentOS-announce Digest, Vol 41, Issue 10
by centos-announce-request＠centos.org 19 Jul '08

19 Jul '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:0598 Critical CentOS 4 s390(x) firefox - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Fri, 18 Jul 2008 15:45:06 +0300 From: Pasi Pirhonen <upi(a)centos.fi> Subject: [CentOS-announce] CESA-2008:0598 Critical CentOS 4 s390(x) firefox - security update To: centos-announce(a)centos.org Message-ID: <20080718124506.GB31936(a)centos.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2008:0598 https://rhn.redhat.com/errata/RHSA-2008-0598.html The following updated files have been uploaded and are currently syncing to the mirrors: s390: updates/s390/RPMS/firefox-1.5.0.12-0.21.el4.centos.s390.rpm s390x: updates/s390x/RPMS/firefox-1.5.0.12-0.21.el4.centos.s390x.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

Howto: Java Plugin for Firefox 3.0.1?
by James B. Byrne 19 Jul '08

19 Jul '08

Can anyone here give me the magic decoder ring recipe for getting jre "plugged" into Firefox 3.0.1? The plugins directory is gone and the Firefox FAQ regarding this issue cryptically mentions that plugin support has been dropped. It then points one to a early adopter SUN jre1.6-10 page that has innumerable dependencies which my version of CentOS-5.2 does not meet. Firefox 3.0.0 had a plugins directory and it did support the logical link plugin: ls -s libjavaplugin_oji.so /usr/java/default/plugin/i386/ns7/libjavaplugin_oji.so I have no clue how to get java to work in FF3.0.1 at the moment. Any help would be appreciated. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 3

Re: [CentOS] Getting printer to work under 5.2
by Donald Buchan 19 Jul '08

19 Jul '08

Yes on both counts. That's where I was dealing with the parts about the one-dependancy-mentionned-at-a-time part. No luck, hence the reason for uninstalling it and reverting to the yum repository. > From: Anne Wilson <cannewilson(a)googlemail.com> > Subject: Re: [CentOS] Getting printer to work under 5.2 > To: CentOS mailing list <centos(a)centos.org> > Message-ID: <200807171028.02611.cannewilson(a)googlemail.com> > Content-Type: text/plain; charset="utf-8" > > On Thursday 17 July 2008 04:04, Donald Buchan wrote: > > I have a standard hplip install on my 5.2 box installed from the repos > > (it originally was installed from the 5.1 disks and followed any upgrade > > that may have occured in the transition to 5.2). My printer is a HP > > Deskjet F4180 connecting via USB. > > Did you run hp-setup (as root, of course)? > > Anne

3 4

semi OT: logwatch results
by Robert - elists 19 Jul '08

19 Jul '08

Semi Off Topic My searching hasn't found what I consider superior info, and we are wondering from others experience on this list... In the logwatch results we all see the info below on almost a daily basis I have taken the liberty of combining logwatch results from centos 4 and 5 machines for extra info and future searchability ----- Centos 4 ----- --------------------- httpd Begin ------------------------ GET http://scifi.pages.at/myproxies/azenv.php HTTP/1.1 with response code(s) 404 1 responses GET http://thecric.free.fr/AZenv/azenv.php HTTP/1.1 with response code(s) 404 1 responses ----- Centos 5 ----- --------------------- httpd Begin ------------------------ Requests with error response codes http://scifi.pages.at/myproxies/azenv.php: 2 Time(s) http://thecric.free.fr/AZenv/azenv.php: 2 Time(s) GET http://scifi.pages.at/myproxies/azenv.php HTTP/1.1 with response code(s) 404 3 responses GET http://thecric.free.fr/AZenv/azenv.php: 2 Time(s) HTTP/1.1 with response code(s) 404 3 responses Is it like people are setting up servers to do advertising in our logs while looking for some vulnerabilities? Thanks in advance for your insight... :-) - rh

3 2

How to examine crash dump of Centos Kernel
by Nataraj 19 Jul '08

19 Jul '08

Hi, I have been able to successfully use crash to examine a crash dump of kernel-PAE-2.6.18-92.1.6.el5 using the following command: crash /boot/System.map-2.6.18-92.1.6.el5PAE /usr/lib/debug/lib/modules/2.6.18-92.1.6.el5PAE/vmlinux ./vmcore I then installed the package kernel-debug-2.6.18-92.1.6.el5 and rebooted with that (there is no PAE debugging kernels in the repository). I reproduced my crash and collected a crash dump, however when I try to examine the dump I get the following error: crash /boot/System.map-2.6.18-92.1.6.el5debug /usr/lib/debug/lib/modules/2.6.18-92.1.6.el5/vmlinux ./vmcore crash: v2 module syment space malloc (2005518689 symbols): Cannot allocate memory I have used ulimit in the shell to set all of the limits to unlimited and I still continue to have this problems. Any ideas? Is it possible that I would need a 64 bit OS in order to examine a 4gb crash dump with symbols and debugging information? I have the following kernel-debuginfo packages installed: kernel-debuginfo-common-2.6.18-92.1.6.el5 kernel-PAE-debuginfo-2.6.18-92.1.6.el5 kernel-debuginfo-2.6.18-92.1.6.el5 I am running CentOS 5.2 on a dual Xeon Server with 4gb of memory. Thanks, Nataraj

1 0

Setting max limits in /etc/security/limits.conf
by Dr R L Oswald 18 Jul '08

18 Jul '08

2 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss