Discuss

discuss@lists.centos.org

3 participants
34748 discussions

CentOS-announce Digest, Vol 132, Issue 6
by centos-announce-request＠centos.org 19 Feb '16

19 Feb '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2016:0258 Important CentOS 7 thunderbird Security Update (Johnny Hughes) 2. CESA-2016:0258 Important CentOS 6 thunderbird Security Update (Johnny Hughes) 3. CESA-2016:0258 Important CentOS 5 thunderbird Security Update (Johnny Hughes) 4. CEBA-2016:0268 CentOS 6 ptlib FASTTRACK BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 18 Feb 2016 17:19:24 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0258 Important CentOS 7 thunderbird Security Update Message-ID: <20160218171924.GA56122(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0258 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0258.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: d97294b0f502e02f49e4d2ca9a3fb5cc368a3ad6c08162e06e509e607a00a307 thunderbird-38.6.0-1.el7.centos.x86_64.rpm Source: 2555990fee9e57f5a64ea43642860f30fe807d073e48d048665adadb1bc489f1 thunderbird-38.6.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Thu, 18 Feb 2016 18:42:37 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0258 Important CentOS 6 thunderbird Security Update Message-ID: <20160218184237.GA57736(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0258 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0258.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b6943f1cda53a9c502ee9839f608c29d0e75cf44673490822c93f395e3f40141 thunderbird-38.6.0-1.el6.centos.i686.rpm x86_64: 5a1261b9965569d707060f8e7ff869288d7e0361efe4e5637086bf6295afe27a thunderbird-38.6.0-1.el6.centos.x86_64.rpm Source: 4f89116b8b8bda266f2063760ceb136832e8e2d874ffd33d9e424d479d980a63 thunderbird-38.6.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Fri, 19 Feb 2016 04:09:41 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0258 Important CentOS 5 thunderbird Security Update Message-ID: <20160219040941.GA32077(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0258 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0258.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: fc47e7fd94bd3079266b27f1307d954fd5a9f9442a91c3a2cb6172e86faa9224 thunderbird-38.6.0-1.el5.centos.i386.rpm x86_64: ec8dcb696078c89e8aa535036e750f5e4e06e40dbcd883e255287ea6b69bd61e thunderbird-38.6.0-1.el5.centos.x86_64.rpm Source: 2e6c718b8d5ce3cf2919e8c44995d1048ae923f32159b06cfc6f0dd06caa2088 thunderbird-38.6.0-1.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 4 Date: Fri, 19 Feb 2016 04:19:41 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2016:0268 CentOS 6 ptlib FASTTRACK BugFix Update Message-ID: <20160219041941.GA19991(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2016:0268 Upstream details at : https://rhn.redhat.com/errata/RHBA-2016-0268.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 0348146563840e96432128fce8893e5c1e052b8c7a04731580b71ef6ec88d928 ptlib-2.6.5-5.el6.i686.rpm f15fb5b00ef80df31948e084c9746c4d38af9b8f6f17f435ee35a2a420a1805b ptlib-devel-2.6.5-5.el6.i686.rpm x86_64: 0348146563840e96432128fce8893e5c1e052b8c7a04731580b71ef6ec88d928 ptlib-2.6.5-5.el6.i686.rpm 9591b407f7f281255041138bea978c25fa450d4db068cc267396eef5f47e82d4 ptlib-2.6.5-5.el6.x86_64.rpm f15fb5b00ef80df31948e084c9746c4d38af9b8f6f17f435ee35a2a420a1805b ptlib-devel-2.6.5-5.el6.i686.rpm 16d22c5bd3e7e1f8c2030c3c9cfedbb8d8163bd079d91fa284e299ec4d2f9e77 ptlib-devel-2.6.5-5.el6.x86_64.rpm Source: 77f35943cb9f218305dad4478269b10bc9b932a7376710c6a4ad147b6aeeab52 ptlib-2.6.5-5.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 132, Issue 6 ***********************************************

1 0

dhcpd frequent renewals
by david 19 Feb '16

19 Feb '16

Folks This might be the wrong place to ask, but I don't know where to turn. My internal home network, including wireless, is controlled by a Centos6 server, which provides dhcpd services, along with NAT. I have DHCPD configured with the addresses 192.168.155.200 through 192.168.155.254 as the range for dynamic allocations. The default-lease time is 1800 seconds, the maximum is 3600 seconds. My windows clients, and even an ipad-mini behave nicely, asking for DHCP renewals once ever five minutes, or at about 80% of the default lease time, a behavior I can understand. However, several of my guests, with their own iPads, I-watches, iPhones, connect to my network (via a wireless access point which does not do routing functions) and they're renewing once every 20-30 seconds. In addition, these devices also loose connectivity for brief intervals, which seems to be roughly synchronized with dhcp renewal. This last fact I deduce by doing "tail -f /etc/log/messages" and hearing them say "lost connection" at just about the same moment the DHCPREQUEST and DHCPACK statements show up. It's difficult to believe that Apple IOS devices (all of which are running apple's latest) have a dhcp client problem not shared by windows or even linux hosts. Does anyone have any clues? David Kurn San Francisco DHCPD.CONF file is excerpted below: ---------------------------------------- ddns-update-style none; subnet 192.168.155.0 netmask 255.255.255.0 { authoritative; option routers 192.168.155.2; option subnet-mask 255.255.255.0; option broadcast-address 192.168.155.255; option domain-name "daku.org"; option domain-name-servers 192.168.155.2; option netbios-name-servers 192.168.155.2; option time-offset -28800; # Pacific standard time range dynamic-bootp 192.168.155.200 192.168.155.254; default-lease-time 1800; max-lease-time 3600; } --------------------------------------------

2 3

CentOS 7, Xeon CPUs, not booting
by m.roth＠5-cent.us 18 Feb '16

18 Feb '16

This is happening on anything other than plain vanilla Dell servers. One R730, with dual Tesla cards, one R420, with a fibre card for a RAID device, it never switches root. All these systems have Xeons, not AMD CPUs. We've had this with every one of the 327 kernels. In addition, it seems to happen also with the 229.20.1; the 229.14.1 has no such problem. >From the rdsosreport: starting at line 126: /dev/disk/by-label: total 0 lrwxrwxrwx 1 root 0 10 Jan 27 19:03 SWAP -> ../../sda2 lrwxrwxrwx 1 root 0 10 Jan 27 19:03 \x2f -> ../../sda3 lrwxrwxrwx 1 root 0 10 Jan 27 19:03 \x2fboot -> ../../sda1 Then, starting at line 1283: [ 3.317027] <servername> systemd[1]: Found device ST500NM0003-9ZM172 /. [ 3.317974] <servername> systemd[1]: Starting File System Check on /dev/disk/by-label/\x2f... [ 3.320089] <servername> systemd-fsck[590]: Failed to detect device /dev/disk/by-label// [ 3.320567] <servername> systemd[1]: systemd-fsck-root.service: main process exited, code=exited, status=1/FAILURE [ 3.320972] <servername> systemd[1]: Failed to start File System Check on /dev/disk/by-label/\x2f. Does *ANYONE* have any clues as to what's going on? Meanwhile, on a plain vanilla Dell R420, I see: ll /dev/disk/by-label/ total 0 lrwxrwxrwx. 1 root root 10 Feb 17 10:06 SWAP -> ../../sda2 lrwxrwxrwx. 1 root root 10 Feb 17 10:06 boot -> ../../sda1 lrwxrwxrwx. 1 root root 10 Feb 17 10:06 root -> ../../sda3 So, what is this by-label with the x2f, and why can't it find the drives? Or do I have to file a bug report? This is a true show-stopper. mark

3 4

Can't install CentOS 7 on SuperMicro X7DB3 with Adaptec AIC-9410 Controller
by homeryan＠sina.com 18 Feb '16

18 Feb '16

I have a server with Super Micro X7DB3 motherboard and Adaptech AIC-9410 controller (http://www.supermicro.com/products/motherboard/Xeon1333/5000P/X7DB3.cfm) The hard disk is single SeaGate SAS disk (300Gb). I'd like to install CentOS 7 on the server, but unfortunately, the CentOS installer can't find any hard disk. I think the problem maybe caused by the disk controller. Can you please tell me how to fix the problem ? Thanks for your help!

2 1

Thunderbird can not import S/MIME certificate
by Timo Schoeler 18 Feb '16

18 Feb '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi, in May 2015 I reported [0] that I can not import my S/MIME certificate. Issuer is GlobalSign. Jan Horak reassigned it to the nss guys ("This seems to be problem in NSS code, reassigning to nss component"), but then the ticket idled and was eventually closed by EOL of Fedora 21 (though I stated it persists with F22). I just reopened the ticket because it still doesn't work. The certificate itself is okay, it works on other platforms. Nobody else using S/MIME? Best, Timo https://bugzilla.redhat.com/show_bug.cgi?id=1218977 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iF4EAREIAAYFAlbFgGYACgkQuSPmkPhAW0r2QQD+Pn97WYQNwItYmJ4eqgMm4ufk SSWrC4Yjm7iEYNotTkEA/RbB9lLTjecLaCpkQ33zV1bVCcHdsvQfi/WLhZH5zwur =/SFq -----END PGP SIGNATURE-----

2 1

New glibc for CentOS-6 and CentOS-7 and CVE-2015-7547
by Johnny Hughes 18 Feb '16

18 Feb '16

I normally just let the daily announce post to this list show what is available for updates, but there is a CVE (CVE-2015-7547) that needs a bit more attention which will be on today's announce list of updates. We released a new glibc yesterday for CentOS-6 and CentOS-7 .. it is VERY important that all users update to these versions: This update is rated as Critical by Red Hat, meaning that it is remotely exploitable under some circumstances. Make sure this update works in your environments and update as soon as you can. CentOS-7: https://lists.centos.org/pipermail/centos-announce/2016-February/021672.html https://rhn.redhat.com/errata/RHSA-2016-0176.html CentOS-6: https://lists.centos.org/pipermail/centos-announce/2016-February/021668.html https://rhn.redhat.com/errata/RHSA-2016-0175.html These mitigate CVE-2015-7547: https://access.redhat.com/security/cve/CVE-2015-7547 https://bugzilla.redhat.com/show_bug.cgi?id=1293532 Can't stress how important this update is .. here are a couple stories: http://arstechnica.com/security/2016/02/extremely-severe-bug-leaves-dizzyin… http://www.theregister.co.uk/2016/02/16/glibc_linux_dns_vulernability/ Please note that the ONLY way this is tested to work is with ALL updates from CentOS-6 or CentOS-7 applied along with the glibc updates. So a yum update with base and updates repo enabled is the ONLY tested scenario. Did I say *ONLY* enough? Thanks, Johnny Hughes

6 16

CentOS 6.7 Drivers for Compaq Storageworks TL891 Minilibrary
by Mustafa Mohammed 18 Feb '16

18 Feb '16

Hello all I am trying to setup a backup system using Bacula on CentOS 6.7 installed on eserver x345 but cannot find the drivers Any help in finding the drivers will be much appreciated Regards Mustafa

3 3

Systemd persistent change to service file
by Michael H 18 Feb '16

18 Feb '16

Hi All, I had my database fall over earlier, Initially I thought it was due to a change in the OS but the postgresql update overwrote my systemd service file. How can I create a file for my postgresql service that will not be overwritten when updates are applied? Am I correct in thinking it will be something like vi /etc/systemd/system/postgresql.service.d/postgresql-limit-stack.conf #with the contents: .include /etc/systemd/system/multi-user.target.wants/postgresql.service [Service] LimitSTACK=17825792 thanks Michael

3 2

slightly off-topic, RAID program for on-board SAS 2308-4i ?
by Zube 17 Feb '16

17 Feb '16

Does anyone know what program can be used to query the RAID status from the OS for an on-board LSI SAS 2308-4i? On this page: http://docs.avagotech.com/docs/12351997 there is a curious note on the left that reads: "Integrated MegaRAID support available upon request" After one mostly fruitless round of chatting with LSI/Avago/Broadcom and one completely fruitless round of chatting with HP, I found confirmation under the storage section here: http://www8.hp.com/us/en/mpc/workstations/product-detail.html?oid=5225041#!… It looks like HP didn't "request" MegaRAID support, so MegaCli and StorCli don't see anything and neither does lsiutils (nor hpacucli, tried just for a laugh). Any clues appreciated. Thanks for your time. Cheers, Zube

3 4

Openswan <-> VyOS
by John Cenile 17 Feb '16

17 Feb '16

Hello, I'm having a bit of trouble connecting our current CentOS Openswan server with a Vyos server via IPSec. I've posted this on the VyOS forums, but haven't had many helpful responses, so I thought I would ask here. http://forum.vyos.net/showthread.php?tid=26504&pid=29703#pid29703 Basically our Openswan configuration is as follows: conn VYOS keyingtries=0 keylife=20m ikelifetime=2h left=<VYOS IP> right=<OPENSWAN IP> leftsubnets={ 10.1.1.0/24,10.1.2.0/24,10.1.3.0/24,10.1.4.0/24,10.1.5.0/24} rightsubnets={10.2.1.0/24,10.2.2.0/24,10.2.3.0/24,10.2.4.0/24} auto=start authby=secret dpddelay=30 dpdtimeout=120 dpdaction=hold phase2alg=aes256-sha1;modp1536 phase2=esp ike=aes256-sha1;modp1536 Our VyOS configuration is posted in the above forum post, except now I have followed their advice and created 20 tunnels (each subnet to each subnet, if that makes sense). However, when I enabled this, I got the following errors on the Openswan server: Feb 18 01:24:27 OPENSWAN pluto[8010]: "VYOS/3x3" #70: next payload type of ISAKMP Hash Payload has an unknown value: 243 Feb 18 01:24:27 OPENSWAN pluto[8010]: "VYOS/3x3" #70: malformed payload in packet Feb 18 01:24:27 OPENSWAN pluto[8010]: "VYOS/3x3" #70: sending notification PAYLOAD_MALFORMED to <VYOS IP>:500 Feb 18 01:24:27 OPENSWAN pluto[8010]: "VYOS/4x4" #69: next payload type of ISAKMP Hash Payload has an unknown value: 170 Feb 18 01:24:27 OPENSWAN pluto[8010]: "VYOS/4x4" #69: malformed payload in packet Feb 18 01:24:27 OPENSWAN pluto[8010]: "VYOS/5x4" #68: next payload type of ISAKMP Hash Payload has an unknown value: 63 Feb 18 01:24:27 OPENSWAN pluto[8010]: "VYOS/5x4" #68: malformed payload in packet And on our VyOS server we got the following errors: Feb 18 01:17:19 VYOS pluto[20807]: "peer-<OPENSWAN IP>-tunnel-20" #381: sending encrypted notification INVALID_ID_INFORMATION to <OPENSWAN IP>:500 Feb 18 01:17:19 VYOS pluto[20807]: "peer-<OPENSWAN IP>-tunnel-20" #381: cannot respond to IPsec SA request because no connection is known for 10.1.1.0/24===<VYOS IP>[<VYOS IP>]...<OPENSWAN IP>[<OPENSWAN IP>]=== 10.2.3.0/24 Feb 18 01:17:19 VYOS pluto[20807]: "peer-<OPENSWAN IP>-tunnel-20" #381: sending encrypted notification INVALID_ID_INFORMATION to <OPENSWAN IP>:500 Feb 18 01:17:23 VYOS pluto[20807]: "peer-<OPENSWAN IP>-tunnel-11" #422: cannot install eroute -- it is in use for "peer-<OPENSWAN IP>-tunnel-3" #403 Feb 18 01:17:23 VYOS pluto[20807]: "peer-<OPENSWAN IP>-tunnel-16" #421: cannot install eroute -- it is in use for "peer-<OPENSWAN IP>-tunnel-4" #395 Feb 18 01:17:23 VYOS pluto[20807]: "peer-<OPENSWAN IP>-tunnel-20" #420: cannot install eroute -- it is in use for "peer-<OPENSWAN IP>-tunnel-5" #417 Feb 18 01:17:23 VYOS pluto[20807]: "peer-<OPENSWAN IP>-tunnel-20" #381: Informational Exchange message must be encrypted Feb 18 01:17:24 VYOS pluto[20807]: "peer-<OPENSWAN IP>-tunnel-20" #381: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x14702d90 (perhaps this is a duplicated packet) Feb 18 01:17:24 VYOS pluto[20807]: "peer-<OPENSWAN IP>-tunnel-20" #381: sending encrypted notification INVALID_MESSAGE_ID to <OPENSWAN IP>:500 Does anyone have any idea what I might be doing wrong? I've tried doing only 5 tunnels, however then some subnets couldn't reach certain subnets (as I said in the VyOS forum thread), and now I've tried each subnet to each subnet. I can't find much (any) information on it, but does Openswan support VTI interfaces? Would that solve my problem? Thanks in advance.

3 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss