Discuss

discuss@lists.centos.org

2 participants
34758 discussions

Fwd: Heads up: OpenSSH users
by Michael H 15 Jan '16

15 Jan '16

Probably worth a read... http://www.openssh.com/txt/release-7.1p2 > Important SSH patch coming soon. For now, everyone on all operating > systems, please do the following: > > Add undocumented "UseRoaming no" to ssh_config or use "-oUseRoaming=no" > to prevent upcoming #openssh client bug CVE-2016-0777. More later. echo "UseRoaming no" >> /etc/ssh/ssh_config

13 16

CentOS-announce Digest, Vol 131, Issue 5
by centos-announce-request＠centos.org 15 Jan '16

15 Jan '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2016:0038 CentOS 6 findutils FASTTRACK BugFix Update (Johnny Hughes) 2. CEBA-2016:0039 CentOS 6 ibus FASTTRACK BugFix Update (Johnny Hughes) 3. CESA-2016:0043 Moderate CentOS 7 openssh Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 14 Jan 2016 23:14:13 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2016:0038 CentOS 6 findutils FASTTRACK BugFix Update Message-ID: <20160114231413.GA50043(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2016:0038 Upstream details at : https://rhn.redhat.com/errata/RHBA-2016-0038.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 1d998ee1603cc90a26061b7b73e2286f741e7ca70a3a70af5f26eee1f12f32ee findutils-4.4.2-8.el6.i686.rpm x86_64: 1905c13970c52829fe8de918eb4f685a58e4476cfe110e019f339a6033612e69 findutils-4.4.2-8.el6.x86_64.rpm Source: 6a9b2e233ceecd5ffd4543331142f4c979c19e7d39ba56dc3be7780e07fdc973 findutils-4.4.2-8.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Thu, 14 Jan 2016 23:14:55 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2016:0039 CentOS 6 ibus FASTTRACK BugFix Update Message-ID: <20160114231455.GA50367(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2016:0039 Upstream details at : https://rhn.redhat.com/errata/RHBA-2016-0039.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: f76e912c52bcf2af15eaa713caa69cd6a2607e4b9e65de81cc91afc0c35f7c41 ibus-1.3.4-9.el6.i686.rpm 2a16cf43821903f5f0f06cd0b5d07fb7a1462557dbc171dd7541e6fba2fa5ce5 ibus-devel-1.3.4-9.el6.i686.rpm 6ec26fdfbde0876556242b5e06b833c03cad1ab457db915c5b328667488ec1d2 ibus-devel-docs-1.3.4-9.el6.i686.rpm f98ab3e7a7ebddceb165e7c26324e499bf236d409af5d46f3586225a1d99d42b ibus-gtk-1.3.4-9.el6.i686.rpm 56e19414c3ade4b771855bda38b9949570d884040b0a959b36ce8412374e5893 ibus-libs-1.3.4-9.el6.i686.rpm x86_64: 4e71c20728c4df004aa1eea443a5818d92ac68e4b1cf0d7c0bb306ea3cfdf49a ibus-1.3.4-9.el6.x86_64.rpm 2a16cf43821903f5f0f06cd0b5d07fb7a1462557dbc171dd7541e6fba2fa5ce5 ibus-devel-1.3.4-9.el6.i686.rpm 4c1b157eab95c92982dba9748f2fc629c02b43d1b7257ff314475951ff63b039 ibus-devel-1.3.4-9.el6.x86_64.rpm 971ffb745137e8f9c1137913eb5026a606a84783b697df788880e64048993b7d ibus-devel-docs-1.3.4-9.el6.x86_64.rpm f98ab3e7a7ebddceb165e7c26324e499bf236d409af5d46f3586225a1d99d42b ibus-gtk-1.3.4-9.el6.i686.rpm f243f4d169791bd2b600c82beb2b11ffc97045a1001f9c47463fe20690e45fac ibus-gtk-1.3.4-9.el6.x86_64.rpm 56e19414c3ade4b771855bda38b9949570d884040b0a959b36ce8412374e5893 ibus-libs-1.3.4-9.el6.i686.rpm 2a454c9379e70f33d87c5bb4b4a1c0077609547f3c1739ce796bc19c7df7c8c9 ibus-libs-1.3.4-9.el6.x86_64.rpm Source: 3753983af979d5b302eb780522f2fe898b5ed96185dfe52ae1ba999cc664a8a2 ibus-1.3.4-9.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Thu, 14 Jan 2016 23:31:46 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0043 Moderate CentOS 7 openssh Security Update Message-ID: <20160114233146.GA52596(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0043 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0043.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 7aa1a232479f86e7f3b82d335b0683d815ca92f20e14a166a49c03bbb7f8ac9e openssh-6.6.1p1-23.el7_2.x86_64.rpm a32b1a4625dd33016d110eb247329be9c242ca78f0b8f8b6d5ec6fc8a3cdc1f0 openssh-askpass-6.6.1p1-23.el7_2.x86_64.rpm 614657ffb529da95ab36aaf3a7f0e72b28622503ab1f7276083bf176b49dd58f openssh-clients-6.6.1p1-23.el7_2.x86_64.rpm cc70492e83aa70730a0b885bc00ad645c3ff81c31abcf85a11a06bd8df51895f openssh-keycat-6.6.1p1-23.el7_2.x86_64.rpm 97ae0347cf1cee17df80c150ff633bfd35d26184f3f9cb1d5b1640af32e9fbeb openssh-ldap-6.6.1p1-23.el7_2.x86_64.rpm a5b98159190191c035e260475b6e7fd5a0abeba2babe09749cc2f54748a633dc openssh-server-6.6.1p1-23.el7_2.x86_64.rpm 7c78c4bcb410d1060463e8bf694f1fe144636042102604a8fbb403e398404b53 openssh-server-sysvinit-6.6.1p1-23.el7_2.x86_64.rpm 93567227a3013b9311dd1669af23e4c2628140c10ce21591ec50afe56b8df8f2 pam_ssh_agent_auth-0.9.3-9.23.el7_2.i686.rpm c5b9720aec08ee9e853981401dd5946ee4515859d53ec9e86795f7e4403f1db6 pam_ssh_agent_auth-0.9.3-9.23.el7_2.x86_64.rpm Source: c0ae36b679f0dd6171897ad8952ec809c968464e685d7a0ae9333ea443132d10 openssh-6.6.1p1-23.el7_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 131, Issue 5 ***********************************************

1 0

Question on booting other kernel
by adrian＠pa0rda.nl 14 Jan '16

14 Jan '16

Hi, In CentOS6 I do: echo "savedefault --default=0 --once" | grub --batch My question is how do I do the same on CentOS7? Any ideas? Adrian -- Adri P. van Bloois Antonlaan 104 email: adrian(a)pa0rda.nl 3701 VG Zeist voice: +31-(0)-30-6912741 The Netherlands fax: NONE 52 05'15.77"N 5 4'44.56"E QTH-locater JO 22 OC "Elegance is not a dispensable luxury but a factor that decides between success and failure." Edsger W. Dijkstra

2 1

CentOS 7, missing tools
by m.roth＠5-cent.us 14 Jan '16

14 Jan '16

I'm trying to resolve an issue where a back is taking a *long* time. The data's being pulled from a CentOS 6 box by a CentOS 7 box. I went to use netstat, and iostat and sar... and they're not there. Should I install sysstat, or are there replacement tools I'm expected to use? mark

2 1

Re: [CentOS] Fwd: Heads up: OpenSSH users
by Timo Schöler 14 Jan '16

14 Jan '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 01/14/2016 06:05 PM, Timo Schöler wrote: > On 01/14/2016 05:34 PM, m.roth(a)5-cent.us wrote: >> Michael H wrote: >>> Probably worth a read... >>> >>> http://www.openssh.com/txt/release-7.1p2 >>> >>>> Important SSH patch coming soon. For now, everyone on all >>>> operating systems, please do the following: >>>> >>>> Add undocumented "UseRoaming no" to ssh_config or use >>>> "-oUseRoaming=no" to prevent upcoming #openssh client bug >>>> CVE-2016-0777. More later. >>> >>> echo "UseRoaming no" >> /etc/ssh/ssh_config > >> Please clarify - will the update add *Roam* to >> /etc/ssh/ssh_config? > > It will fix the bug. > >> I've just checked on two systems that are CentOS 7, a server, and >> a workstation that I literally built yesterday, and grep -i on >> both reports "no, not here". > > Yes, as it's undocumented, but enabled since about 2010. FYI: https://github.com/openssh/openssh-portable/search?q=AppGate+Network+Sec urity+AB > Even OpenBSD 5.9 (pre-release, it's going to be released on May > 1st, 2016) does not mention it. > > Timo > >> mark -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iF4EAREIAAYFAlaX2IIACgkQuSPmkPhAW0rh0AD+Kje8MZE5xlnK1YQlH1H7oFgK M6JOfkgiWt3gvdzOjewA/RgopaQKm7YkdIgiiVRCVoKtUaRVieBr6xz/SccrISFR =94uA -----END PGP SIGNATURE-----

1 0

systemd: SIGPWR handler for Centos 7.2?
by Harald Dunkel 14 Jan '16

14 Jan '16

Hi folks, it seems that sigpwr.target is just a dummy. Something like kill -PWR 1 or systemctl isolate sigpwr.target is visible in the journal, but it does not power down the host. This breaks a clean shutdown of LXContainers setup with Centos 7.2. I would guess there are problems with UPS monitors, too. Is there a workaround? Every helpful comment is highly appreciated Harri

1 0

CentOS-announce Digest, Vol 131, Issue 4
by centos-announce-request＠centos.org 14 Jan '16

14 Jan '16

1 0

Balsa problem
by Fred Smith 13 Jan '16

13 Jan '16

Wondering if anyone here has built Balsa for Centos-7. I've used it on Centos 5 and 6 for years, though I had to compile it myself. It compiles cleanly on c7, but when run I keep getting error messages that say "Failure to sync mailbox xxxx" that seem to happen when I try to view a mailbox that has new/unread mail, or perhaps it happens when a mailbox receives new mail whilei Balsa is open, not certain which. I can't find anything in the Balsa mailing list(s) that helps, and Google isn't my friend in searching for any help on this. Anybody got any thoughts? -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- But God demonstrates his own love for us in this: While we were still sinners, Christ died for us. ------------------------------- Romans 5:8 (niv) ------------------------------

2 1

Slow to reboot
by Jerry Geis 13 Jan '16

13 Jan '16

I have CentOS 7.2 installed and when I issue a reboot I get a message about "A stop job is running" and its my process I start with a service file. My service file just runs a script. Type=forking ExecStart=/path/to/myscript What do I add so the reboot process goes faster ? My process does not need to stop anything before allowing the reboot. No databases are open or anything... Thanks, Jerry

1 0

Getting a boost patch into RHEL 7
by Alice Wonder 13 Jan '16

13 Jan '16

There is a patch to boost that should get into both CentOS and RHEL 7. I already sent an e-mail to the person who last modified the rpm spec file but I have no idea if he will even see the e-mail. The small patch - https://github.com/boostorg/asio/pull/23/files The problem it fixes - boost assumes that the TLS supports SSLv3 which the OpenSSL currently in RHEL / CentOS 7 does. However SSLv3 is incredibly old and is no longer considered to be secure and should not be used, so some alternative TLS implementations do not even include support for it. LibreSSL is one such example, and some distributions (e.g. Debian) have removed SSLv3 support from the OpenSSL library they ship. Given how old and insecure SSLv3 is and given the incredibly long support cycle of RHEL 7 it would not surprise me at all if removal of SSLv3 from the OpenSSL library in RHEL 7 is going to happen at some point in the next few years. As such getting this patch into boost will be necessary. The patch does not have any impact on boost when using TLS libraries that do support SSLv3 so it will not do any harm to get it into the packaging now. Getting it into the packaging now means boost is ready when the change is made, and it also makes life a lot easier for people like me who have to use an alternate TLS implementation because we need the EC stuff that RHEL removed from OpenSSL due to potential patent reasons that the lawyers were afraid of. I'm hoping someone on this list with some influence understands the issue. Filing a bug report with CentOS I suppose is also an option, but given that the patch doesn't solve a problem with any *current* CentOS packages, I doubt that would result in the bug trickling up to RHEL and they are the ones that have to apply the patch for it to make it into CentOS. Thank you for your time

2 4

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss