Discuss

discuss@lists.centos.org

2 participants
34758 discussions

CentOS-announce Digest, Vol 202, Issue 1
by centos-announce-request＠centos.org 02 Feb '22

02 Feb '22

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2022:0328 Critical CentOS 7 samba Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 1 Feb 2022 18:03:11 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2022:0328 Critical CentOS 7 samba Security Update Message-ID: <20220201180311.GA26601(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2022:0328 Critical Upstream details at : https://access.redhat.com/errata/RHSA-2022:0328 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: e4bb7031f520b296dbe56b80bca148b9f8409329cef2007dd5a06e4548e780d3 ctdb-4.10.16-18.el7_9.x86_64.rpm 650ecdc0d3c0f2d221347461dc47da74b9aeb8041326a30662c310db8452c289 ctdb-tests-4.10.16-18.el7_9.x86_64.rpm 51a15a1f28637adcdf2f0d13e8d6a81017809612ab5a6a46dda8025be6f4aeec libsmbclient-4.10.16-18.el7_9.i686.rpm c57edeef8ad80c1218e8f3c5f03298b8e4c78de794ef89153d213f767d7e76e8 libsmbclient-4.10.16-18.el7_9.x86_64.rpm ad24252031ea8c0e12e7acf23ebf80586b5162f12ce5e4eac8273966928e89d0 libsmbclient-devel-4.10.16-18.el7_9.i686.rpm f7faa6dc9e93209b28d0cf6a0ef6f0697ece6387cbb402f2554016b1db3192a5 libsmbclient-devel-4.10.16-18.el7_9.x86_64.rpm 7a5d98b836fb6cbb743996d5dd4c13cd9fe0b108498811fbc5ccf1dafa7797ef libwbclient-4.10.16-18.el7_9.i686.rpm 4d7880fbe60e6c8b83c4e01347b5e9ad274f8eee38feee4a3d7c3f8410c561ae libwbclient-4.10.16-18.el7_9.x86_64.rpm 092200d5b5dde09d6818651bad72eaf924bc014da7f290860fa9416ca5d80c29 libwbclient-devel-4.10.16-18.el7_9.i686.rpm b9c8fac8c6b10a87a024279c0ecef2ddf68ea3c55076d9478ee93b3ba8bfc5c0 libwbclient-devel-4.10.16-18.el7_9.x86_64.rpm f878599f24a0292058a13dbc96e35533360c55c1e4616d4db0cce5da1e4ed0e3 samba-4.10.16-18.el7_9.x86_64.rpm 7dae50109a258ad6094999bad1cf8de9bc680b967fcb221cf9e38f896f8cbf93 samba-client-4.10.16-18.el7_9.x86_64.rpm 7029af1412cd34983bc590c58b75f33a9bcb75cb2a5bdf5e6514f8ac4b8089e6 samba-client-libs-4.10.16-18.el7_9.i686.rpm ba296a88e1432d771cd920109f74098580b81344ab27e869815dfaf5cd73b1bd samba-client-libs-4.10.16-18.el7_9.x86_64.rpm 5e9fa6a9c3dc6c925f58ce3d112f48e8d7a89835f56c85fdfa648a880246ebcc samba-common-4.10.16-18.el7_9.noarch.rpm 84eb961185970d439cbddea77f57986510cc0e948d47a65f64173b75fa19949b samba-common-libs-4.10.16-18.el7_9.i686.rpm 1e539eb940638371c11f0e077bf6396b4c0afe2d8a5e55e1a10d9e05b8865487 samba-common-libs-4.10.16-18.el7_9.x86_64.rpm dc916d8fb8fa71e2b3598fd5f5d1544cc54745b116f27a7ab2ecadf3df918a7f samba-common-tools-4.10.16-18.el7_9.x86_64.rpm fd9eac77800954e912c795b1baa2897a1255e8c44f1dcbe7f154da4bbb690fcd samba-dc-4.10.16-18.el7_9.x86_64.rpm 99fbbb592c991c048c088d31d6dc60cef74de08cfb469bfc81e440dd3938c4d4 samba-dc-libs-4.10.16-18.el7_9.x86_64.rpm 6b416b00b5ef6cb53e5629184ff45e772a8c2a837a9e0bb69dc38ebdd07ec7f2 samba-devel-4.10.16-18.el7_9.i686.rpm 3bb061745bcab5ccdf7cac588403affcb1f45108fd78412872bc78b646404b98 samba-devel-4.10.16-18.el7_9.x86_64.rpm df6e614866add11969ca0b65851bfa71c6bc9f4844246ad53138cc6918480108 samba-krb5-printing-4.10.16-18.el7_9.x86_64.rpm 0ebd7a7d93f6af20c4e8fff8d52032fda80556a14021adf330e1c9f9e8063482 samba-libs-4.10.16-18.el7_9.i686.rpm 0d795cbf22fec282f02654f7712344c97027974130c274b8e837bec939303861 samba-libs-4.10.16-18.el7_9.x86_64.rpm f2241666af94fe720a9238c276f97db47b1cb8737b678465e84924e2d3a8d6e1 samba-pidl-4.10.16-18.el7_9.noarch.rpm a8f1e3373e10bfb45af34690456fb06dbf9cf8022362cfda341212c6841271db samba-python-4.10.16-18.el7_9.i686.rpm 009f1e5fdfe0287c2d456390aacab52be52e77247292e285d5caa965c2330dab samba-python-4.10.16-18.el7_9.x86_64.rpm 40519a4b9f7188d9987ae8efcdcd2a6c382d6311c8aafae7cf914313e1d5eef3 samba-python-test-4.10.16-18.el7_9.x86_64.rpm 0159bd2e5e5911a949c27ecc4ee8003c3e2bdc4fe0074b1d0eb53e28360580fa samba-test-4.10.16-18.el7_9.x86_64.rpm 166e3f5af4c284b83976badb2166ef9cbf7ee9204cc585ab900bfe28006a7917 samba-test-libs-4.10.16-18.el7_9.i686.rpm 92d0bc0edf07e6a5b24d5dcbe83924f7438ff5eaa170034fbde75f52fbbde969 samba-test-libs-4.10.16-18.el7_9.x86_64.rpm 87db2fe7caa5472a08068b5229089b79f46799961c76df49341071e86736a23e samba-vfs-glusterfs-4.10.16-18.el7_9.x86_64.rpm 4378731794448fc800d324e71a41beeae2b174ba078b23eb78ccff27fd8d5764 samba-winbind-4.10.16-18.el7_9.x86_64.rpm 9b69e41e187f8c3cd3d73d8a8b89d8ee3e0237dbf11ca2481d2bb26444e5ed32 samba-winbind-clients-4.10.16-18.el7_9.x86_64.rpm 2833f7d8c4764e2c4c247d5f95bf07698e64f2a6dc53aba92fe3fa1f92affe42 samba-winbind-krb5-locator-4.10.16-18.el7_9.x86_64.rpm f85bf7e8f01a89ac772fea257536fa49cc0e71b925cccbf45c5bac62a6c37058 samba-winbind-modules-4.10.16-18.el7_9.i686.rpm b4483eb8d3d6d68b68ad3e08c79385f43b0a40aa17c3681e16b53bdddfa10bef samba-winbind-modules-4.10.16-18.el7_9.x86_64.rpm Source: 69981259831a04dd088b9eb1fc60ae9782fc37bbfc3d6508f214cd574ae77b4f samba-4.10.16-18.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)libera.chat Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 202, Issue 1 ***********************************************

1 0

OT: DMARC for centos.org
by Chris Schanzle 02 Feb '22

02 Feb '22

We use Office365 for hosting mail. You may stop reading now, no offense taken. :-) Recently and intermittently, emails from the centos and centos-devel mailing lists are being put in my "Junk E-Mail" folder by Microsoft (not by any client filtering). My insightful email admin has been working with Microsoft to nail down the cause and it is (partly?) due to centos.org not having a DMARC DNS record. I verified this is true with a missing "ANSWER SECTION" if DNS is queried: dig _dmarc.centos.org txt When I pressed for more details about the intermittent filtering, he replied: "Maybe passing SPF or DKIM for some sending domains helps get some of them through? I can’t be totally sure in this evolving Microsoft dynamic situation. But I’m still not through with them. Still asking questions trying to draw out answers..." Microsoft suggested: You can ask an admin in the sending domain to configure their email authentication records: https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security… My apologies if this is bringing up issues already beaten to death. But if it could be addressed without too much hassle...it might help others as well. Thanks!

1 0

repoview alternative
by Leon Fauster 28 Jan '22

28 Jan '22

With the move of yum/dnf forward to python3, tools like repoview for building browsable repos do not work anymore. Any ideas of other tools for that? Do not need to be streams/modules aware ... https://src.fedoraproject.org/rpms/repoview https://koji.fedoraproject.org/koji/packageinfo?packageID=3731 -- Leon

1 0

CentOS-announce Digest, Vol 201, Issue 5
by centos-announce-request＠centos.org 28 Jan '22

28 Jan '22

1 0

CentOS-announce Digest, Vol 201, Issue 4
by centos-announce-request＠centos.org 27 Jan '22

27 Jan '22

1 0

Polkit patch for CVE-2021-4034 for CentOS 6
by Simon Matter 26 Jan '22

26 Jan '22

Hi, For those still running CentOS 6 somewhere, the patch below can be added to the source RPM. Verified to fix the issue on CentOS 6.10 x86_64 with this exploit: https://packetstormsecurity.com/files/165728/Polkit-pkexec-CVE-2021-4034-Pr… Regards, Simon PS: Sure, I know nobody is really running old EL6 anymore :-) diff -Naupr polkit-0.96.patched/src/programs/pkcheck.c polkit-0.96/src/programs/pkcheck.c --- polkit-0.96.patched/src/programs/pkcheck.c 2022-01-26 17:03:29.059789167 +0100 +++ polkit-0.96/src/programs/pkcheck.c 2022-01-26 17:04:34.051159050 +0100 @@ -96,6 +96,11 @@ main (int argc, char *argv[]) allow_user_interaction = FALSE; ret = 126; + if (argc < 1) + { + exit(126); + } + g_type_init (); details = polkit_details_new (); diff -Naupr polkit-0.96.patched/src/programs/pkexec.c polkit-0.96/src/programs/pkexec.c --- polkit-0.96.patched/src/programs/pkexec.c 2022-01-26 17:03:29.046789093 +0100 +++ polkit-0.96/src/programs/pkexec.c 2022-01-26 17:04:34.056159079 +0100 @@ -415,6 +415,14 @@ main (int argc, char *argv[]) gchar *opt_user; pid_t pid_of_caller; + /* + * If 'pkexec' is called THIS wrong, someone's probably evil-doing. Don't be nice, just bail out. + */ + if (argc < 1) + { + exit(127); + } + ret = 127; authority = NULL; subject = NULL; @@ -520,7 +528,15 @@ main (int argc, char *argv[]) goto out; } g_free (path); - argv[n] = path = s; + path = s; + + /* argc<2 and pkexec runs just shell, argv is guaranteed to be null-terminated. + * /-less shell shouldn't happen, but let's be defensive and don't write to null-termination + */ + if (argv[n] != NULL) + { + argv[n] = path; + } } if (access (path, F_OK) != 0) {

1 0

CentOS 7 polkit update
by Ranbir 26 Jan '22

26 Jan '22

Hi All, I was looking for an update to polkit in CentOS 7 to fix CVE-2021-4034, but I don't see one yet. I'm assuming it's coming soon-ish. Is there any word on roughly when that will be? Here's the RHEL 7 advisory: https://access.redhat.com/errata/RHSA-2022:0274 -- Ranbir

2 2

CentOS-announce Digest, Vol 201, Issue 3
by centos-announce-request＠centos.org 26 Jan '22

26 Jan '22

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2022:0204 Moderate CentOS 7 java-11-openjdk Security Update (Johnny Hughes) 2. CESA-2022:0143 Important CentOS 7 httpd Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 25 Jan 2022 13:01:29 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2022:0204 Moderate CentOS 7 java-11-openjdk Security Update Message-ID: <20220125130129.GA3938(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2022:0204 Moderate Upstream details at : https://access.redhat.com/errata/RHSA-2022:0204 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 447af92c743509fb44207fbeccdb5f8b9f35865517ad94009935976e7e5339ed java-11-openjdk-11.0.14.0.9-1.el7_9.i686.rpm 2e329420409c6a8030ebb04a37a8421f1043c49ea15d0e644789281758483080 java-11-openjdk-11.0.14.0.9-1.el7_9.src.rpm d2619ceca8fca7e9ee19cea2143fbd219429e9f9b06409934c366c8d6fb4cefb java-11-openjdk-11.0.14.0.9-1.el7_9.x86_64.rpm 569c3afb20ee7aa02a316df5870c65b53bb314376059e9e761ab3e81622b3891 java-11-openjdk-demo-11.0.14.0.9-1.el7_9.i686.rpm 7b73f05a3cad8a9e27146ed66584c90db157d3c8dd9073156714b06d53ae16b4 java-11-openjdk-demo-11.0.14.0.9-1.el7_9.x86_64.rpm 8b57170fd0541d89c862ecea52f823ede947a5b16983a9646cf0c6e4970996b4 java-11-openjdk-devel-11.0.14.0.9-1.el7_9.i686.rpm b620f989048c7f2f276ae3cbc4a5217f51cff7aad191e75030d927f8022e7c5a java-11-openjdk-devel-11.0.14.0.9-1.el7_9.x86_64.rpm 2e548be4d940969b8feee6cc4ffb8dde5ac295e684713eba0f96b20f287e7b40 java-11-openjdk-headless-11.0.14.0.9-1.el7_9.i686.rpm 237858b698163e9a4615ec1ab98636d66cd7e26deb3512708bd88164019a1994 java-11-openjdk-headless-11.0.14.0.9-1.el7_9.x86_64.rpm 54bf6ecd682245bc83076c67fa21c5c7db62c883a50972dc40dbfeda8a121125 java-11-openjdk-javadoc-11.0.14.0.9-1.el7_9.i686.rpm 87e7e547e429b8f05895e13d2852cf0bb18f91a4aba2a1bddc445c950284fc3a java-11-openjdk-javadoc-11.0.14.0.9-1.el7_9.x86_64.rpm 2117399e425ef95fb4a8b8d38c39a38d73b5e0ad8f8212f6e467901f5f05ca9c java-11-openjdk-javadoc-zip-11.0.14.0.9-1.el7_9.i686.rpm c441b3fe43905a4ba494377fd18f7afb8d59b3c95abfb93384cd0577b3568a5c java-11-openjdk-javadoc-zip-11.0.14.0.9-1.el7_9.x86_64.rpm 12a2e4e010484b9e7bd30fc89af801f0e1e212a2faaaa5017acde6e83cd52964 java-11-openjdk-jmods-11.0.14.0.9-1.el7_9.i686.rpm 25ac1048044afca67ce7c131d644b1fbf4661666b58a9bf482f289e5b1905c0f java-11-openjdk-jmods-11.0.14.0.9-1.el7_9.x86_64.rpm a2a0890a1bee535a6e50b46532778911b437fe971d72e228048964d8dd0f7550 java-11-openjdk-src-11.0.14.0.9-1.el7_9.i686.rpm 47005db64df1a2026edd49418e5714bd0cc4b55a22af61ad08162f38d849be23 java-11-openjdk-src-11.0.14.0.9-1.el7_9.x86_64.rpm bf23abfbb52f27d2a18450e2bbc48bb65f02cee123b849b8e4fb9c07a0e91259 java-11-openjdk-static-libs-11.0.14.0.9-1.el7_9.i686.rpm 740cebdde7c6823d4f1beee23080215f1f12ef9577011c88461d3bf597d1931a java-11-openjdk-static-libs-11.0.14.0.9-1.el7_9.x86_64.rpm Source: befce90bbaf47b69ceb69ffa028b408e6af7fbebf9712bed6d44f7f49655b330 java-11-openjdk-11.0.14.0.9-1.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)libera.chat Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Tue, 25 Jan 2022 17:31:14 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2022:0143 Important CentOS 7 httpd Security Update Message-ID: <20220125173114.GA28605(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2022:0143 Important Upstream details at : https://access.redhat.com/errata/RHSA-2022:0143 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 9a93379d2c2af5db3ccd19b3b12e93f6dee917f2156fc18048525a7a90b313ca httpd-2.4.6-97.el7.centos.4.x86_64.rpm 6598e08634815038cb179701fefe7d97564cc4df49d4858c66ac323e5c9c5628 httpd-devel-2.4.6-97.el7.centos.4.x86_64.rpm fd5c2fb9ea8fe33dda81b2c13693c8901313964b621a4845172a14c12df1439a httpd-manual-2.4.6-97.el7.centos.4.noarch.rpm 8fefb0595d7ec2b0969e86042785c698809542ecd2b793434519146c6285a65e httpd-tools-2.4.6-97.el7.centos.4.x86_64.rpm b505b67a44068dde29102d451d6c870990ee335392b3e5328c79d22c00912870 mod_ldap-2.4.6-97.el7.centos.4.x86_64.rpm 8bad0cae9095a9462eee405070201f5aa90c8754e0b955a3e7e3599af9f81ffb mod_proxy_html-2.4.6-97.el7.centos.4.x86_64.rpm 1cbb2208fd1a88235398a0429e2e4dfaef8c5ce0593aa8b550c370224ca23fe1 mod_session-2.4.6-97.el7.centos.4.x86_64.rpm dd0e9de5630bcc248395482170c7a3b3d61876f1b93a950464ca6a1125b6dd53 mod_ssl-2.4.6-97.el7.centos.4.x86_64.rpm Source: a0aca05862f95a73c9787e88e9ec7b091f07d021acccb1b796e1ba4d0556eba1 httpd-2.4.6-97.el7.centos.4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)libera.chat Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 201, Issue 3 ***********************************************

1 0

Ping as regular user not allowed (CentOS Stream 8)
by Toralf Lund 24 Jan '22

24 Jan '22

Following some update or the other (I think) on my CentOS Stream 8 system, I'm no longer able to use ping as a regular user; I get $ ping www.centos.org ping: socket: Operation not permitted Does anyone else see this? It it a bug, or were the system/default permissions deliberately changed? Can anyone suggest a fix/workaround? Actually, I can find several different ones via a simple web search, but they are generally related to other distributions, I'm not quite sure which would be the most appropriate for CentOS... Thanks. - Toralf

10 21

question hitrate log4j
by Ralf Prengel 20 Jan '22

20 Jan '22

Hallo, how many hits do you ve on your system. I ve hits from 0 to more than 50 depending on the function of the system (for example developer system or desktop of a secretary) Ralf Von meinem iPad gesendet

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss