Discuss

discuss@lists.centos.org

34758 discussions

NTP Vulnerability?
by listmail 20 Dec '14

20 Dec '14

I just saw this: https://ics-cert.us-cert.gov/advisories/ICSA-14-353-01 which includes this: " A remote attacker can send a carefully crafted packet that can overflow a stack buffer and potentially allow malicious code to be executed with the privilege level of the ntpd process. All NTP4 releases before 4.2.8 are vulnerable." "This vulnerability is resolved with NTP-stable4.2.8 on December 19, 2014." I guess no one has had time to respond yet. Wonder if I should shut down my external NTP services as a precaution? --Bill

4 4

Asymmetric encryption for very large tar file
by Xinhuan Zheng 19 Dec '14

19 Dec '14

Hello CentOS list, I have a requirement that I need to use encryption technology to encrypt very large tar file on a daily basis. The tar file is over 250G size and those are data backup. Every night the server generated a 250G data backup and it¹s tar¹ed into one tarball file. I want to encrypt this big tarball file. So far I have tried two technologies with no success. 1) generating RSA 2048 public/private key pair via ³openssl req -x509 -nodes -newkey rsa:2048 -keyout private.pem -out public.pem² command and uses the public key to encrypt the big tar file. The encryption command I used is "openssl smime -encrypt -aes256 -in backup.tar -binary -outform DEM -out backup.tar.ssl public.pem². The resulting backup.tar.ssl file is only 2G then encryption process stops there and refuse to do more. Cannot get around 2G. 2) generating GPG public/private key pair via ³gpg ‹gen-key² then encrypt with "gpg -e -u "backup" -r "backup² backup.tar². However, the gpg encryption stops at file size 50G and refuse to do more and the gpg process took over 48 hours. The server is very capable. It¹s 8 CPU Intel 2.33 GHz 16G RAM installing latest RHEL 5.11. Thought CentOS 5 is pretty much compatible in release with RHEL 5. I have searched google and found out a technique that utilizes the symmetric encryption. Then it needs to generate a symmetric key every day and uses public/private key pair to encrypt the symmetric key. However the drawback is that we don¹t know how to manage the symmetric key securely. We can¹t leave the un-encrypted symmetric key there on the server but we have to use the un-encrypted symmetric key for encryption process. Plus we¹ll need to manage the symmetric encryption key, public and private key pair 3 things securely. Has anyone had experience on managing the asymmetric encryption for very large file and what¹s the best practice for that? Thanks. - xinhuan

12 14

Re: [CentOS] How to configure xguest Firefox home page
by James B. Byrne 19 Dec '14

19 Dec '14

On Mon, December 8, 2014 21:12, David McGuffey wrote: > I've installed CentOS 6.6 on a workstation at a local non-profit as a > kiosk machine. I used xguest. Works great, except now the customer > wants the Firefox homepage to be one pointing to a particular site. > Doesn't seem to be much documentation on how to make minor changes to > the account. Lots of SELinux guidance, but nothing about default home > page, etc. > > Dave > > > > See: /usr/lib/firefox/firefox.cfg Add: lockPref("browser.startup.homepage", "http://www.example.com/path/) Google: FireFox Kiosk -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

How to configure xguest Firefox home page
by David McGuffey 19 Dec '14

19 Dec '14

I've installed CentOS 6.6 on a workstation at a local non-profit as a kiosk machine. I used xguest. Works great, except now the customer wants the Firefox homepage to be one pointing to a particular site. Doesn't seem to be much documentation on how to make minor changes to the account. Lots of SELinux guidance, but nothing about default home page, etc. Dave

4 3

Re: [CentOS] WARNING: No module xenblk found for kernel
by Peter 19 Dec '14

19 Dec '14

On 12/20/2014 07:02 AM, Dave Stevens wrote: > $ rpm -q kernel kernel-xen > kernel-2.6.18-371.11.1.el5 > kernel-2.6.18-371.12.1.el5 > kernel-2.6.18-398.el5 > kernel-2.6.18-400.el5 > kernel-2.6.18-400.1.1.el5 > kernel-xen-2.6.18-371.11.1.el5 > kernel-xen-2.6.18-371.12.1.el5 > kernel-xen-2.6.18-398.el5 > kernel-xen-2.6.18-400.el5 > kernel-xen-2.6.18-400.1.1.el5 It is as I suspected, you've been installing both kernel and kernel-sen the entire time. paste the contents of /etc/grub.conf and then I can give you a proper answer about what to do. Peter

1 0

Re: [CentOS] Asymmetric encryption for very large tar file
by Xinhuan Zheng 19 Dec '14

19 Dec '14

Hello, Thanks for all feedback I got. I am pretty sure that if I used ³openssl enc² method, it is able to handle large file over 250g size perfectly. I think openssl installed on the system is capable of doing large file support. However, when using ³openssl smime², it is not able to. Apparently it¹s smime method limitations, not the openssl. Other than smime and enc, what other methods can I use for large file support that would use the asymmetric public/private keys? - xinhuan

1 0

CentOS-announce Digest, Vol 118, Issue 12
by centos-announce-request＠centos.org 19 Dec '14

19 Dec '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2014:2008 Important CentOS 5 kernel Security Update (Johnny Hughes) 2. CEBA-2014:2015 CentOS 6 cpufrequtils FASTTRACK BugFix Update (Johnny Hughes) 3. CEBA-2014:2014 CentOS 7 golang BugFix Update (Johnny Hughes) 4. CESA-2014:2010 Important CentOS 7 kernel Security Update (Johnny Hughes) 5. CEBA-2014:2018 CentOS 6 java-1.7.0-openjdk BugFix Update (Johnny Hughes) 6. CESA-2014:2021 Important CentOS 6 jasper Security Update (Johnny Hughes) 7. CESA-2014:2021 Important CentOS 7 jasper Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 18 Dec 2014 13:03:54 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:2008 Important CentOS 5 kernel Security Update Message-ID: <20141218130354.GA21452(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:2008 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-2008.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 6ba562e82b41d226a94ff5bf3a1eeea2d60c47e34c5cb4a7c87f959b89e78df8 kernel-2.6.18-400.1.1.el5.i686.rpm 9c05cfd09dc56aa8e06b7bb8c596d149b2994766a02ce5881858962b15bdc84d kernel-debug-2.6.18-400.1.1.el5.i686.rpm 09cc14c2a30495bc8d8fe6d9656e1661f2cb68423f77cc016625d98cdb9ecd57 kernel-debug-devel-2.6.18-400.1.1.el5.i686.rpm c84b6b08f6a661343d899c3f047e463c558f7caa4148ae04066fccdf6ca96581 kernel-devel-2.6.18-400.1.1.el5.i686.rpm 25bdff4730524a18f666f3fccd091fd8d8de6d51e56ec1b27c23411b1b653a00 kernel-doc-2.6.18-400.1.1.el5.noarch.rpm e6ff8a06d6371c0d44aae8ec54de407cbe234316ad190d841df9f3203f655442 kernel-headers-2.6.18-400.1.1.el5.i386.rpm 23edc72733314d31fd61e0a0892073fbe4f29bae731ab5a0ed58a359ad45fc28 kernel-PAE-2.6.18-400.1.1.el5.i686.rpm f4c9e8de45147a96051357edf89b98b3ba942b5d7d08cf4a834b833cdd6aa214 kernel-PAE-devel-2.6.18-400.1.1.el5.i686.rpm 923028c0a3f24ed84758f1aea10fb2f1d3f1fc686baf463da3d48133317b6479 kernel-xen-2.6.18-400.1.1.el5.i686.rpm cacf645ea5c0be63abf933721ba877f8c9ed1b496710e65070f2129f53520257 kernel-xen-devel-2.6.18-400.1.1.el5.i686.rpm x86_64: 2f6f7228f60089bafb29dd49d0fd07b5669925f5df09721b82b7b32d2a6db27f kernel-2.6.18-400.1.1.el5.x86_64.rpm b9f2265e4a3fc43f47c2e0f005ad9b93c0201774afa6d903cbb303a4158f6d37 kernel-debug-2.6.18-400.1.1.el5.x86_64.rpm 5b53d6eb09bb9b5a4d12c8be501804479a65400fbe7eb4d8eb3bab2ca3ddb45b kernel-debug-devel-2.6.18-400.1.1.el5.x86_64.rpm 944442f571237b00f39557a950b91dc16bf84873c137d7dbcdb16d984f22b470 kernel-devel-2.6.18-400.1.1.el5.x86_64.rpm 25bdff4730524a18f666f3fccd091fd8d8de6d51e56ec1b27c23411b1b653a00 kernel-doc-2.6.18-400.1.1.el5.noarch.rpm ce820b2df729875eacfedd36213e78089d35b499e87de95039a3a88f97d80b3f kernel-headers-2.6.18-400.1.1.el5.x86_64.rpm 8d1ae83a187d2ab25acd247a40eba378515579ba7026e61091c473a83acb5f07 kernel-xen-2.6.18-400.1.1.el5.x86_64.rpm 5fc23d80833f8575776d0d949d1c09d671a951c288b4b48f4c401fddfc00a225 kernel-xen-devel-2.6.18-400.1.1.el5.x86_64.rpm Source: 180a7d0379b99dd938203ef79ba3c2f3b345eee70b9fdb6d5ad6dc49bedc7a3c kernel-2.6.18-400.1.1.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Thu, 18 Dec 2014 13:53:36 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2014:2015 CentOS 6 cpufrequtils FASTTRACK BugFix Update Message-ID: <20141218135336.GA18184(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:2015 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-2015.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: f34f074b540b76b0d1ac971866a940eb61d0538aa47d2d85b2776b3bb0ce1d7f cpufrequtils-007-8.el6.i686.rpm 79914ff6eb2a9e45ba38c2c0a32d05ee70f2f7f62bc90e5d079df8b27b9749b1 cpufrequtils-devel-007-8.el6.i686.rpm x86_64: f34f074b540b76b0d1ac971866a940eb61d0538aa47d2d85b2776b3bb0ce1d7f cpufrequtils-007-8.el6.i686.rpm 8238fb5f828e2d3dfe2d9f808c86ac62f55215d2f1ad550b54282dbdd5f35876 cpufrequtils-007-8.el6.x86_64.rpm 79914ff6eb2a9e45ba38c2c0a32d05ee70f2f7f62bc90e5d079df8b27b9749b1 cpufrequtils-devel-007-8.el6.i686.rpm 16b3bc4424b0b9eab962cfa1973ac4331541b721323552828f9762a0cb8bb3fd cpufrequtils-devel-007-8.el6.x86_64.rpm Source: 6e47d79cb2e660ac1573d52458a87dae30a5c058b666e7cf4e9b086f5193324e cpufrequtils-007-8.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Thu, 18 Dec 2014 16:32:45 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2014:2014 CentOS 7 golang BugFix Update Message-ID: <20141218163245.GA30708(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:2014 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-2014.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: e0898c70683955da8ce95d4ffcc7e5b7d09a531696ec7298a481be04fd771b18 emacs-golang-1.3.3-2.el7_0.noarch.rpm 0bd584b2c18bc9828b6b7761a2d5d84cce7a345455315c0771e1d108725ae88b golang-1.3.3-2.el7_0.x86_64.rpm 1f3b2fb1f040e00dc8b503b6d10f0fcf6ca7ba94435073a1c20bd6b6d5fdbacd golang-pkg-bin-linux-amd64-1.3.3-2.el7_0.x86_64.rpm 12853cf4d4b89e87b1e65167085a3baebb7de72ebcb1a5b7ad2a49d281765905 golang-src-1.3.3-2.el7_0.noarch.rpm f311196a43bab2c82c076a1d7621a42ead3295e0f84f4c1952b2ca2cf037a6a3 golang-vim-1.3.3-2.el7_0.noarch.rpm Source: 1c29026f24d00237c55552f2389a10d6c594df97320339bc70c407268fc46a8b golang-1.3.3-2.el7_0.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Thu, 18 Dec 2014 17:17:29 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:2010 Important CentOS 7 kernel Security Update Message-ID: <20141218171729.GA37051(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:2010 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-2010.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 3102507dee24e401d272de9ed41c7e6a55f5e85415e8f66102d14d63a681b452 kernel-3.10.0-123.13.2.el7.x86_64.rpm 63f436a8fbce22e637cf1644903b2d30c33282a93e0fb77ac5429e023c249459 kernel-abi-whitelists-3.10.0-123.13.2.el7.noarch.rpm 0c6131a5a84cc1cfabbe4b18e5aef2a57c238f1a63771063a349c71c40dd69a2 kernel-debug-3.10.0-123.13.2.el7.x86_64.rpm 5398fc67cb35d656b66585963692c85e1740b07fd97108b4a0baa6b549bd2396 kernel-debug-devel-3.10.0-123.13.2.el7.x86_64.rpm 874079bdcb77fdb8404f081b63cb54d99684832b7e8178c85e6c6f9cc9960d20 kernel-devel-3.10.0-123.13.2.el7.x86_64.rpm 9ace57e19b34391152dae26d952f986326c56224a52b6ba84812b5ade2a12d03 kernel-doc-3.10.0-123.13.2.el7.noarch.rpm a5a27478047e3c47207380735a798e28bd56e20d57c9f8030038ac35379b0d78 kernel-headers-3.10.0-123.13.2.el7.x86_64.rpm d502ed624a7b5aeef659e520127fd775d6e7eb50bbf9df5cfe9c80249078babe kernel-tools-3.10.0-123.13.2.el7.x86_64.rpm 8c18446d82db2466d496467bf619b0ecf8cdceec554313bda0f2fe85e3f5bce7 kernel-tools-libs-3.10.0-123.13.2.el7.x86_64.rpm 539367e5789ad36b630bb04bc167b4f6e3b49b692b8063f673ee013a1c04cbc0 kernel-tools-libs-devel-3.10.0-123.13.2.el7.x86_64.rpm ccdebb87d77a48370c96fa7554957d1770412f3a9086183ece8aa16a1b9754b8 perf-3.10.0-123.13.2.el7.x86_64.rpm aa63a3c6d99fddc52c319644ef0ed349ba7537250b49cebb9381a5b15460b68e python-perf-3.10.0-123.13.2.el7.x86_64.rpm Source: 5cf16c495afa0864a8146a2051efa43cc13b7cd92e4f2a92f97b6a168fa59229 kernel-3.10.0-123.13.2.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Thu, 18 Dec 2014 22:11:27 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2014:2018 CentOS 6 java-1.7.0-openjdk BugFix Update Message-ID: <20141218221127.GA46728(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:2018 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-2018.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: e95898200130ad5d70ab511133a22dafc65b584cc3a24e65aefb573fd16ffb18 java-1.7.0-openjdk-1.7.0.71-2.5.3.2.el6_6.i686.rpm ff17a9a9538b596c3f37a553e73a61d2471f1d172d09f04d710a2e6a705d5839 java-1.7.0-openjdk-demo-1.7.0.71-2.5.3.2.el6_6.i686.rpm c30e155dcccd2b87897b949f1019834c041135359858694c497e6d3002d4d7cc java-1.7.0-openjdk-devel-1.7.0.71-2.5.3.2.el6_6.i686.rpm 29d9a219c59cbebc9316a8a76d5120a4f2130e32e8360a455c01bad1b80c8c2d java-1.7.0-openjdk-javadoc-1.7.0.71-2.5.3.2.el6_6.noarch.rpm 6661c70b3fb8fadb7fce4b9e2ae733565a2b8d59cb0fa62bdf0cbd10bfd76f56 java-1.7.0-openjdk-src-1.7.0.71-2.5.3.2.el6_6.i686.rpm x86_64: 9728a3157a25c34553d6b8e787d28334bc3a7d1f731204f443c0b538c6e770ab java-1.7.0-openjdk-1.7.0.71-2.5.3.2.el6_6.x86_64.rpm 3918c2bce0940b971f1b9833c3e96620bbf7cc918ed35ff3dd13743bfe6119d3 java-1.7.0-openjdk-demo-1.7.0.71-2.5.3.2.el6_6.x86_64.rpm 881d8950c96ba14cfe3847eca9ab024351faa559c5590f031ddd4b0219a4c369 java-1.7.0-openjdk-devel-1.7.0.71-2.5.3.2.el6_6.x86_64.rpm 29d9a219c59cbebc9316a8a76d5120a4f2130e32e8360a455c01bad1b80c8c2d java-1.7.0-openjdk-javadoc-1.7.0.71-2.5.3.2.el6_6.noarch.rpm e7215345d544e2f78f511596099d50a0252b32520113f2e3e5b53c4de223f63c java-1.7.0-openjdk-src-1.7.0.71-2.5.3.2.el6_6.x86_64.rpm Source: 4c17ea187ad974a738b4006fced16d2cd25cd221fb95d4a01ac97a969d369d41 java-1.7.0-openjdk-1.7.0.71-2.5.3.2.el6_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Thu, 18 Dec 2014 22:11:55 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:2021 Important CentOS 6 jasper Security Update Message-ID: <20141218221155.GA46995(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:2021 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-2021.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 04d4070c104df7ffbad82cea6877551a3ccb5833d1be8bb891970af50c75edea jasper-1.900.1-16.el6_6.2.i686.rpm 1730bd745df6e5a3f32d8c1ef62edda9e7e3e17e24a10467315f88ad0a9efcd6 jasper-devel-1.900.1-16.el6_6.2.i686.rpm cb599c957af40969fdf7f8f2d9c17976f56232bf9816c9ee9d3082ae1cc46485 jasper-libs-1.900.1-16.el6_6.2.i686.rpm f35db6119ba75befb7464b133537073c785949de047af5f83e828190517f40bb jasper-utils-1.900.1-16.el6_6.2.i686.rpm x86_64: 043f1b7a8a5ade68b0416a91885d1f76bc5183cefdb99d2d6d02d5724c8e1af5 jasper-1.900.1-16.el6_6.2.x86_64.rpm 1730bd745df6e5a3f32d8c1ef62edda9e7e3e17e24a10467315f88ad0a9efcd6 jasper-devel-1.900.1-16.el6_6.2.i686.rpm 5fee6133a02e834451bb617a66602a35efde6c51d40c940fefe82187af9df2c3 jasper-devel-1.900.1-16.el6_6.2.x86_64.rpm cb599c957af40969fdf7f8f2d9c17976f56232bf9816c9ee9d3082ae1cc46485 jasper-libs-1.900.1-16.el6_6.2.i686.rpm 6dcf0a563ff5ec86e07e710bed4f97ccda0f0c65ede7598688beb9bfec496132 jasper-libs-1.900.1-16.el6_6.2.x86_64.rpm bdaa8b107f8587e588b983763d28fbcf6b3394fb9d5242f23a1eb7e8e7ae4f46 jasper-utils-1.900.1-16.el6_6.2.x86_64.rpm Source: baf835a26ca612f33cfb42983ff03adb455bd99201544fc0fb8001452294eb64 jasper-1.900.1-16.el6_6.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 7 Date: Thu, 18 Dec 2014 22:38:19 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:2021 Important CentOS 7 jasper Security Update Message-ID: <20141218223819.GA2432(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:2021 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-2021.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 4aa69b59b645f86761df61064f9f1506fd9d8aefa9ef9742e2712ef414999c9b jasper-1.900.1-26.el7_0.2.x86_64.rpm 29dfc6896f8f640b84c7b22f2eeba6a48ff83fd07a3598f2bde3b2bdf90346e0 jasper-devel-1.900.1-26.el7_0.2.i686.rpm 634e4cd8b04d766ee989914eac2e322554d712018010db4fc4ec8f8446ea49b6 jasper-devel-1.900.1-26.el7_0.2.x86_64.rpm 199cc985c83ff5a93a1a310238b9343a5dbfc44de19ab102eb1650c45843c984 jasper-libs-1.900.1-26.el7_0.2.i686.rpm 548711a372716566f46f4d78a8fa2b8a8e0bc8ce0aaed3c297d467a94c65798c jasper-libs-1.900.1-26.el7_0.2.x86_64.rpm a054d436986562ffa83b16e5e44da352fd9402e407e30663d3a45184b819de77 jasper-utils-1.900.1-26.el7_0.2.x86_64.rpm Source: b56bfebabadaffd095fc340e97bf2b81bb54ca7feb3a1339e3c19057f0cd7534 jasper-1.900.1-26.el7_0.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 118, Issue 12 ************************************************

1 0

One-time reboot into alternate kernel?
by tony＠softins.co.uk 18 Dec '14

18 Dec '14

Apologies if this should be well-known, but I couldn't find anything! Situation: a system in a remote location, with no KVM, IPMI or iLO, and therefore no console access, only ssh. Multiple kernels listed in grub.conf. Is there a way to reboot temporarily into one of the other kernels listed in grub.conf, without changing the default= line, so that a subsequent reboot will default back to the original kernel? The problem I have is that having changed the default= line to select a kernel that doesn't boot properly, I need to have someone visit the console in order manually to select the working kernel again. I would like to avoid that situation if possible. Thanks, Tony -- Tony Mountifield Work: tony(a)softins.co.uk - http://www.softins.co.uk Play: tony(a)mountifield.org - http://tony.mountifield.org

2 1

Re: [CentOS] CentOS 6 - httpd 2.2.29
by James B. Byrne 18 Dec '14

18 Dec '14

On Thu, December 18, 2014 00:31, Jake Shipton wrote: > > Hi Alex, > > In this situation 2.2.29 actually does offer an advantage over CentOS > version 2.2.15. > > The version provided by CentOS does not support Forward Secrecy for SSL > or TLS 1.2. > > Version 2.2.24+ of upstream Apache includes patches which enable both > Forward Secrecy and TLS 1.2. > > Now that C6's OpenSSL can also support both TLS 1.2, and Forward > Secrecy, upgrading Apache slightly to be able to use both of those is a > very viable option. > > Although, in my case I cheat, I compile my own 2.2.29 RPM and then apply > any missing patches and new security patches from RHEL sources myself to > get the best of both worlds. > CentOS-6.6 <--- rpm -qi httpd Name : httpd Relocations: (not relocatable) Version : 2.2.15 Vendor: CentOS Release : 39.el6.centos Build Date: Thu 16 Oct 2014 10:49:26 EDT Install Date: Tue 21 Oct 2014 03:14:55 EDT Build Host: c6b9.bsys.dev.centos.org Group : System Environment/Daemons Source RPM: httpd-2.2.15-39.el6.centos.src.rpm Size : 3085394 License: ASL 2.0 Signature : RSA/SHA1, Fri 17 Oct 2014 04:02:19 EDT, Key ID 0946fca2c105b9de Packager : CentOS BuildSystem <http://bugs.centos.org> URL : http://httpd.apache.org/ Summary : Apache HTTP Server Description : The Apache HTTP Server is a powerful, efficient, and extensible web server. ---> This server supports both TLS-1.2 and PFS. The httpd configuration file for the server host above includes this line: SSLProtocol -all +TLSv1.1 +TLSv1.2 +TLSv1 And this produces no errors. I am writing this message over an https link to the aforementioned server running Squirrelmail. The Calomel Firefox plugin reports TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 as the cipher suite in use and that PFS is enabled on this link. I also have configured security.tls.version.min to 3 in Firefox's about:config to check and the link is not affected. This indicates that tls-1.2 is in fact supported. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

CentOS-announce Digest, Vol 118, Issue 11
by centos-announce-request＠centos.org 18 Dec '14

18 Dec '14

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss