Discuss

discuss@lists.centos.org

2 participants
34758 discussions

Why the Internet is so insecure
by Alice Wonder 30 Nov '16

30 Nov '16

https://github.com/whatwg/html/issues/2119 Major flaw in how the specification for window.opener() works resulting in a major phishing vulnerability that is cake to pull off. The right solution isn't considered because it would break compatibility with the few number sites that depend upon the broken specification even though it would be simple for those sites to implement a secure method. So instead the entire web is left with an extremely poor default and a crappy solution that won't be implemented by a large number of sites. And that's why the Internet will remain a playground for con artists for years to come. I've lost faith in the W3C. It's useless, time for a fork and a new standards body. Seriously. BTW - the fix that W3C does endorse, the rel="noopener" attribute, if that's the best the W3C is willing to do, Red Hat better make sure it makes it into the ESR version of FireFox they ship or it will be vulnerable for some time. The broken fix the W3C endorses isn't even set to make it into standard FireFox until FireFox 52. Which is odd because it is a serious security vulnerability. I'm worried it won't make it into ESR FireFox for some time. ESR often lags on features.

2 1

CentOS-announce Digest, Vol 141, Issue 5
by centos-announce-request＠centos.org 29 Nov '16

29 Nov '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2016:2820 Important CentOS 6 memcached Security Update (Johnny Hughes) 2. CESA-2016:2824 Moderate CentOS 6 expat Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 28 Nov 2016 22:32:14 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:2820 Important CentOS 6 memcached Security Update Message-ID: <20161128223214.GA30260(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:2820 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-2820.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 35812c96c050584a93071cfa04f37afef8d1885a580855d3356db301f6cd87e4 memcached-1.4.4-3.el6_8.1.i686.rpm f6018b34b33f8e11d871213e9488133b673156c7fe9581e2de975127270ad609 memcached-devel-1.4.4-3.el6_8.1.i686.rpm x86_64: 785fe53f1e886e6ea9ca66094f5e68a0f5c9e44f4f9785ad1801d8b935db3eca memcached-1.4.4-3.el6_8.1.x86_64.rpm f6018b34b33f8e11d871213e9488133b673156c7fe9581e2de975127270ad609 memcached-devel-1.4.4-3.el6_8.1.i686.rpm 00a734f56b2dd232bed5f01b1cef425f7d815fc55328561022d0a9e2d345cef5 memcached-devel-1.4.4-3.el6_8.1.x86_64.rpm Source: 970cd80a470d9205181a553e800ef6a82e1b71346fa51e4fa5ff63bfcb15bec1 memcached-1.4.4-3.el6_8.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Mon, 28 Nov 2016 22:32:29 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:2824 Moderate CentOS 6 expat Security Update Message-ID: <20161128223229.GA30357(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:2824 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-2824.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d8059e72fad589ffb0f0cdac95587126c947c071188cfeb5c2b8e6fd989d7742 expat-2.0.1-13.el6_8.i686.rpm 0134a37522bc833ca427003ae54bd250ff2cdc017e2e8e5e5e263943b27ede53 expat-devel-2.0.1-13.el6_8.i686.rpm x86_64: d8059e72fad589ffb0f0cdac95587126c947c071188cfeb5c2b8e6fd989d7742 expat-2.0.1-13.el6_8.i686.rpm 668543cbe7d320c097b893acdf692a38745096590b58615eb67ea940374a2125 expat-2.0.1-13.el6_8.x86_64.rpm 0134a37522bc833ca427003ae54bd250ff2cdc017e2e8e5e5e263943b27ede53 expat-devel-2.0.1-13.el6_8.i686.rpm 64684a601f126ca5e307fa152b56af0bb7cd31cb231a6d9560573d50bbe94326 expat-devel-2.0.1-13.el6_8.x86_64.rpm Source: 1c09bb9d3eb76d17de44a027bb97381053fb94000567865ecc4569429afb4c57 expat-2.0.1-13.el6_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 141, Issue 5 ***********************************************

1 0

The problem of Python configuration for Tk
by sunyeping 29 Nov '16

29 Nov '16

Dear all, I installed an software called pymol in my centos 6.7 system. The installation process seemed to be successful but when I initialized pymol, I got the following error: import _tkinter # If this fails your Python may not be configured for Tk ImportError: libtk8.6.so: cannot open shared object file: No such file or directory. How could I solve the problem? I'll appreciate any help! Best regards. Yeping Sun

2 3

CentOS 6 problem connecting to software source
by Jerry Geis 28 Nov '16

28 Nov '16

Hi All, I have a number of boxes that are popping up a message about "problem connecting to software source". Port 80 has been blocked now where it wasnt before. I have the yum update service disabled, so what is this error message coming from and how do I stop it. Thanks, Jerry

1 0

CentOS 6.4 tcp_fatretrans_alert causes panic
by Zhang Qiang 28 Nov '16

28 Nov '16

Hi all, Our kernel is 2.6.32-358.14.1.x86_64, recently dozens of them panicked, since it's been OK for a long time and the problem emerged all of a sudden, I'm not sure if an upgrade caused this problem. Here's what I got from backtracing: PID: 8136 TASK: ffff8803341aead0 CPU: 2 COMMAND: "" #0 [ffff880028283610] panic at ffffffff815286b8 #1 [ffff880028283690] oops_end at ffffffff8152c8a2 #2 [ffff8800282836c0] no_context at ffffffff81046c1b #3 [ffff880028283710] __bad_area_nosemaphore at ffffffff81046ea5 #4 [ffff880028283760] bad_area_nosemaphore at ffffffff81046f73 #5 [ffff880028283770] __do_page_fault at ffffffff810476d1 #6 [ffff880028283890] do_page_fault at ffffffff8152e7be #7 [ffff8800282838c0] page_fault at ffffffff8152bb75 [exception RIP: tcp_fastretrans_alert+2754] RIP: ffffffff814aed62 RSP: ffff880028283970 RFLAGS: 00010246 RAX: 0000000000000002 RBX: ffff88003d22c940 RCX: 0000000000000002 RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 RBP: ffff8800282839b0 R8: 000000018033a9ac R9: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000d03 R15: 0000000000000000 ORIG_RAX: ffffffffffffffff CS: 0010 SS: 0000 #8 [ffff8800282839b8] tcp_ack at ffffffff814afb2c #9 [ffff880028283a88] tcp_rcv_state_process at ffffffff814b1128 #10 [ffff880028283b18] tcp_v4_do_rcv at ffffffff814b94f0 #11 [ffff880028283bb8] tcp_v4_rcv at ffffffff814baf9a #12 [ffff880028283c48] ip_local_deliver_finish at ffffffff8149648d #13 [ffff880028283c78] ip_local_deliver at ffffffff81496718 #14 [ffff880028283ca8] ip_rcv_finish at ffffffff81495bbd #15 [ffff880028283ce8] ip_rcv at ffffffff81496155 #16 [ffff880028283d28] __netif_receive_skb at ffffffff8145db5b #17 [ffff880028283d88] netif_receive_skb at ffffffff814621b8 #18 [ffff880028283dc8] virtnet_poll at ffffffffa0130565 [virtio_net] #19 [ffff880028283e68] net_rx_action at ffffffff81463193 #20 [ffff880028283ec8] __do_softirq at ffffffff81078c71 #21 [ffff880028283f38] call_softirq at ffffffff8100c1cc #22 [ffff880028283f50] do_softirq at ffffffff8100de05 #23 [ffff880028283f70] irq_exit at ffffffff81078a55 #24 [ffff880028283f80] do_IRQ at ffffffff81532365 --- <IRQ stack> --- #25 [ffff88001e851f58] ret_from_intr at ffffffff8100b9d3 RIP: 00007fa080e1a538 RSP: 00007fa0781ec960 RFLAGS: 00000206 RAX: 0000000000000001 RBX: 00007fa0781ec9a0 RCX: 000000000001ef8c RDX: 0000000000001000 RSI: 0000000000000006 RDI: 00007fa07c093df8 RBP: ffffffff8100b9ce R8: 0000000000000006 R9: 0000000004000001 R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fa0710a18f0 R14: 0000000000000120 R15: 0000000000001000 ORIG_RAX: ffffffffffffff8e CS: 0033 SS: 002b disassemble tcp_fasteretrans_alert+2754 gives: 0xffffffff814aed62 <tcp_fastretrans_alert+2754>: sub 0x58(%rdi),%r8d I know this kernel is a bit old, but since these kernels are in production environment, I can't just upgrade them all to test if it's the problem of the old version. So I need some advice on how to debug or a bug report. Thanks.

2 1

gnucash 2.4.15 - both help and tutor drop out when attempting to read
by geo.inbox.ignored 28 Nov '16

28 Nov '16

greetings all. GnuCash 2.4.15 - both help and tutor drop out when attempting to read within a few seconds of opening. submitted bug report. system: centos 6.8 current toshiba satellite l455d-s5976 w/ amd sempron si-42, 2GB ddr2 aoy, have not search centos or web for problem. thought i might try quick and easy first. has anyone seen such problem? would installing latest version possibly be best answer? tia. -- The important thing is not to stop questioning. - Albert Einstein CentOS GNU/Linux 6.8 KDE 4.3.4 peace out. tc,hago. g . =+= Tired of having your microsoft os hacked? Change to Linux os, used by microsoft hackers. =+= If Bill Gates got a dime for every time Windows crashes... ...oh, wait. He does. THAT explains it! =+= in a world with out fences, who needs gates. =+=

1 0

Outliner plugin for editor
by H 27 Nov '16

27 Nov '16

I am currently running not only Geany (on CentOS and on Windows) but also Gedit on CentOS, much of the use is as markdown-editors being a recent convert to this language. I would, however, also like to be able to essentially use it as an outliner - remember the old DOS outliners that were great for creating document outlines? It would have been perfect had I been able to fold and unfold sections of whatever markdown document I am working on in Geany or Gedit but sadly that does not seem possible... Nor have I been able to find a plugin for Gedit or Geany that would add that functionality. I do not want to have to use LibreOffice or something similar, it's too heavy and cumbersome. Hoping that someone can steer me to a solution!Thank you.

2 3

Off-Topic: Travel Router and Firewall
by H 26 Nov '16

26 Nov '16

This is off-topic and the only connection with CentOS is that the laptop will be running CentOS... I am looking for a travel router/firewall for a number of reasons: - Protect against outside attacks when outside the office/home not relying on whatever protection the laptop/tablet/phone offers. - Allow for fast transfer for data between devices without being limited by the bandwidth of the hotel etc., even without being connected to the internet. - Allow for multiple devices even when the hotel etc. only allows one device to be registered. The ideal device should: - Be small, ideally be able to be charged via a USB port. - Use open-source software that the user can update. - Allow the user to log on the device and set up the connection with the hotel etc. which often requires a userid and password to be entered on a browser page. - Allow using either a RJ-45 wired or wireless connection to the outside net. - Have at least two RJ-45 ports to connect a laptop avoiding WiFi. - Allow for VPN tunneling. If anyone has suggestions, they would be greatly appreciated!

10 15

Thruk reports /var/tmp/live.sock: No such file or directory inspite of the file being present
by Kaushal Shriyan 26 Nov '16

26 Nov '16

Hi, I am running thruk (version is thruk-2.12-1.x86_64) which is a web interface for nagios 4.2.3 and running httpd-2.4.6-40.el7.centos.4.x86_64 on CentOS Linux release 7.2.1511 (Core) While accessing thruk web interface http://thruk.mydomain.com/thruk/cgi-bin/ status.cgi?host=all&_=1480078344275 I am seeing this issue in *thruk.log prod: ERROR: failed to open socket /var/tmp/live.sock: No such file or directory* As you can see the file /var/tmp/live.sock is present as per the below ls -l command output, I am not sure about the above error of No such file or directory #ls -l /var/tmp/live.sock srw-rw---- 1 nagios nagios 0 Nov 25 18:12 /var/tmp/live.sock I can share the /etc/httpd/conf.d/thruk.conf. selinux is disabled. thruk :- https://www.thruk.org/ http://sprunge.us/iPIU is the output of *strace -p pidofthruk* apache 4248 0.0 0.3 106020 31016 ? S 19:25 0:00 /usr/bin/perl /usr/share/thruk/script/thruk_fastcgi.pl Please let me know if you need any additional information. Regards, Kaushal

2 1

linux-3.10.0-514.el7.tar.xz - process of creation
by Staazul 25 Nov '16

25 Nov '16

I try to create own patch for kernel, and I look in process of generation binary rpm file. As I can see, for creation binary package, rpmbuild doesn't uses any set of patches and doesn't uses file of original (vanilla) version of kernel. Instead it, I see some xz archive of compressed tree of kernel probably with all changes (linux-3.10.0-514.el7.tar.xz). How and where I can find process of creation of this archive and to see separately all set of patches? I want to remove some changes and add own. Many thanks to all, who have such info and can give link on process or link on documentations of process of creation of this archive. best regards, Andrei upwork.link

3 3

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss