Discuss

discuss@lists.centos.org

34729 discussions

Start a nNew thread

CentOS-announce Digest, Vol 201, Issue 5
by centos-announce-request＠centos.org 28 Jan '22

28 Jan '22

1 0

CentOS-announce Digest, Vol 201, Issue 4
by centos-announce-request＠centos.org 27 Jan '22

27 Jan '22

1 0

Polkit patch for CVE-2021-4034 for CentOS 6
by Simon Matter 26 Jan '22

26 Jan '22

Hi, For those still running CentOS 6 somewhere, the patch below can be added to the source RPM. Verified to fix the issue on CentOS 6.10 x86_64 with this exploit: https://packetstormsecurity.com/files/165728/Polkit-pkexec-CVE-2021-4034-Pr… Regards, Simon PS: Sure, I know nobody is really running old EL6 anymore :-) diff -Naupr polkit-0.96.patched/src/programs/pkcheck.c polkit-0.96/src/programs/pkcheck.c --- polkit-0.96.patched/src/programs/pkcheck.c 2022-01-26 17:03:29.059789167 +0100 +++ polkit-0.96/src/programs/pkcheck.c 2022-01-26 17:04:34.051159050 +0100 @@ -96,6 +96,11 @@ main (int argc, char *argv[]) allow_user_interaction = FALSE; ret = 126; + if (argc < 1) + { + exit(126); + } + g_type_init (); details = polkit_details_new (); diff -Naupr polkit-0.96.patched/src/programs/pkexec.c polkit-0.96/src/programs/pkexec.c --- polkit-0.96.patched/src/programs/pkexec.c 2022-01-26 17:03:29.046789093 +0100 +++ polkit-0.96/src/programs/pkexec.c 2022-01-26 17:04:34.056159079 +0100 @@ -415,6 +415,14 @@ main (int argc, char *argv[]) gchar *opt_user; pid_t pid_of_caller; + /* + * If 'pkexec' is called THIS wrong, someone's probably evil-doing. Don't be nice, just bail out. + */ + if (argc < 1) + { + exit(127); + } + ret = 127; authority = NULL; subject = NULL; @@ -520,7 +528,15 @@ main (int argc, char *argv[]) goto out; } g_free (path); - argv[n] = path = s; + path = s; + + /* argc<2 and pkexec runs just shell, argv is guaranteed to be null-terminated. + * /-less shell shouldn't happen, but let's be defensive and don't write to null-termination + */ + if (argv[n] != NULL) + { + argv[n] = path; + } } if (access (path, F_OK) != 0) {

1 0

CentOS 7 polkit update
by Ranbir 26 Jan '22

26 Jan '22

Hi All, I was looking for an update to polkit in CentOS 7 to fix CVE-2021-4034, but I don't see one yet. I'm assuming it's coming soon-ish. Is there any word on roughly when that will be? Here's the RHEL 7 advisory: https://access.redhat.com/errata/RHSA-2022:0274 -- Ranbir

2 2

CentOS-announce Digest, Vol 201, Issue 3
by centos-announce-request＠centos.org 26 Jan '22

26 Jan '22

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2022:0204 Moderate CentOS 7 java-11-openjdk Security Update (Johnny Hughes) 2. CESA-2022:0143 Important CentOS 7 httpd Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 25 Jan 2022 13:01:29 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2022:0204 Moderate CentOS 7 java-11-openjdk Security Update Message-ID: <20220125130129.GA3938(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2022:0204 Moderate Upstream details at : https://access.redhat.com/errata/RHSA-2022:0204 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 447af92c743509fb44207fbeccdb5f8b9f35865517ad94009935976e7e5339ed java-11-openjdk-11.0.14.0.9-1.el7_9.i686.rpm 2e329420409c6a8030ebb04a37a8421f1043c49ea15d0e644789281758483080 java-11-openjdk-11.0.14.0.9-1.el7_9.src.rpm d2619ceca8fca7e9ee19cea2143fbd219429e9f9b06409934c366c8d6fb4cefb java-11-openjdk-11.0.14.0.9-1.el7_9.x86_64.rpm 569c3afb20ee7aa02a316df5870c65b53bb314376059e9e761ab3e81622b3891 java-11-openjdk-demo-11.0.14.0.9-1.el7_9.i686.rpm 7b73f05a3cad8a9e27146ed66584c90db157d3c8dd9073156714b06d53ae16b4 java-11-openjdk-demo-11.0.14.0.9-1.el7_9.x86_64.rpm 8b57170fd0541d89c862ecea52f823ede947a5b16983a9646cf0c6e4970996b4 java-11-openjdk-devel-11.0.14.0.9-1.el7_9.i686.rpm b620f989048c7f2f276ae3cbc4a5217f51cff7aad191e75030d927f8022e7c5a java-11-openjdk-devel-11.0.14.0.9-1.el7_9.x86_64.rpm 2e548be4d940969b8feee6cc4ffb8dde5ac295e684713eba0f96b20f287e7b40 java-11-openjdk-headless-11.0.14.0.9-1.el7_9.i686.rpm 237858b698163e9a4615ec1ab98636d66cd7e26deb3512708bd88164019a1994 java-11-openjdk-headless-11.0.14.0.9-1.el7_9.x86_64.rpm 54bf6ecd682245bc83076c67fa21c5c7db62c883a50972dc40dbfeda8a121125 java-11-openjdk-javadoc-11.0.14.0.9-1.el7_9.i686.rpm 87e7e547e429b8f05895e13d2852cf0bb18f91a4aba2a1bddc445c950284fc3a java-11-openjdk-javadoc-11.0.14.0.9-1.el7_9.x86_64.rpm 2117399e425ef95fb4a8b8d38c39a38d73b5e0ad8f8212f6e467901f5f05ca9c java-11-openjdk-javadoc-zip-11.0.14.0.9-1.el7_9.i686.rpm c441b3fe43905a4ba494377fd18f7afb8d59b3c95abfb93384cd0577b3568a5c java-11-openjdk-javadoc-zip-11.0.14.0.9-1.el7_9.x86_64.rpm 12a2e4e010484b9e7bd30fc89af801f0e1e212a2faaaa5017acde6e83cd52964 java-11-openjdk-jmods-11.0.14.0.9-1.el7_9.i686.rpm 25ac1048044afca67ce7c131d644b1fbf4661666b58a9bf482f289e5b1905c0f java-11-openjdk-jmods-11.0.14.0.9-1.el7_9.x86_64.rpm a2a0890a1bee535a6e50b46532778911b437fe971d72e228048964d8dd0f7550 java-11-openjdk-src-11.0.14.0.9-1.el7_9.i686.rpm 47005db64df1a2026edd49418e5714bd0cc4b55a22af61ad08162f38d849be23 java-11-openjdk-src-11.0.14.0.9-1.el7_9.x86_64.rpm bf23abfbb52f27d2a18450e2bbc48bb65f02cee123b849b8e4fb9c07a0e91259 java-11-openjdk-static-libs-11.0.14.0.9-1.el7_9.i686.rpm 740cebdde7c6823d4f1beee23080215f1f12ef9577011c88461d3bf597d1931a java-11-openjdk-static-libs-11.0.14.0.9-1.el7_9.x86_64.rpm Source: befce90bbaf47b69ceb69ffa028b408e6af7fbebf9712bed6d44f7f49655b330 java-11-openjdk-11.0.14.0.9-1.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)libera.chat Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Tue, 25 Jan 2022 17:31:14 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2022:0143 Important CentOS 7 httpd Security Update Message-ID: <20220125173114.GA28605(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2022:0143 Important Upstream details at : https://access.redhat.com/errata/RHSA-2022:0143 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 9a93379d2c2af5db3ccd19b3b12e93f6dee917f2156fc18048525a7a90b313ca httpd-2.4.6-97.el7.centos.4.x86_64.rpm 6598e08634815038cb179701fefe7d97564cc4df49d4858c66ac323e5c9c5628 httpd-devel-2.4.6-97.el7.centos.4.x86_64.rpm fd5c2fb9ea8fe33dda81b2c13693c8901313964b621a4845172a14c12df1439a httpd-manual-2.4.6-97.el7.centos.4.noarch.rpm 8fefb0595d7ec2b0969e86042785c698809542ecd2b793434519146c6285a65e httpd-tools-2.4.6-97.el7.centos.4.x86_64.rpm b505b67a44068dde29102d451d6c870990ee335392b3e5328c79d22c00912870 mod_ldap-2.4.6-97.el7.centos.4.x86_64.rpm 8bad0cae9095a9462eee405070201f5aa90c8754e0b955a3e7e3599af9f81ffb mod_proxy_html-2.4.6-97.el7.centos.4.x86_64.rpm 1cbb2208fd1a88235398a0429e2e4dfaef8c5ce0593aa8b550c370224ca23fe1 mod_session-2.4.6-97.el7.centos.4.x86_64.rpm dd0e9de5630bcc248395482170c7a3b3d61876f1b93a950464ca6a1125b6dd53 mod_ssl-2.4.6-97.el7.centos.4.x86_64.rpm Source: a0aca05862f95a73c9787e88e9ec7b091f07d021acccb1b796e1ba4d0556eba1 httpd-2.4.6-97.el7.centos.4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)libera.chat Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 201, Issue 3 ***********************************************

1 0

Ping as regular user not allowed (CentOS Stream 8)
by Toralf Lund 24 Jan '22

24 Jan '22

Following some update or the other (I think) on my CentOS Stream 8 system, I'm no longer able to use ping as a regular user; I get $ ping www.centos.org ping: socket: Operation not permitted Does anyone else see this? It it a bug, or were the system/default permissions deliberately changed? Can anyone suggest a fix/workaround? Actually, I can find several different ones via a simple web search, but they are generally related to other distributions, I'm not quite sure which would be the most appropriate for CentOS... Thanks. - Toralf

10 21

question hitrate log4j
by Ralf Prengel 20 Jan '22

20 Jan '22

Hallo, how many hits do you ve on your system. I ve hits from 0 to more than 50 depending on the function of the system (for example developer system or desktop of a secretary) Ralf Von meinem iPad gesendet

1 0

LUX repo
by Steve Clark 20 Jan '22

20 Jan '22

Hi List, does anyone use the lux repo. I needed perl-Mail-POP3Client-2.19-5.el7.noarch.rpm except for el8, it was in epel for el7 only place I found it was at repo.iotti.biz/CentOS/8/noarch/perl-Mail-POP3Client-2.19-1.el8.lux.noarch.rpm Thanks, Steve Email Confidentiality Notice: The information contained in this transmission may contain privileged and confidential and/or protected health information (PHI) and may be subject to protection under the law, including the Health Insurance Portability and Accountability Act of 1996, as amended (HIPAA). This transmission is intended for the sole use of the individual or entity to whom it is addressed. If you are not the intended recipient, you are notified that any use, dissemination, distribution, printing or copying of this transmission is strictly prohibited and may subject you to criminal or civil penalties. If you have received this transmission in error, please contact the sender immediately and delete this email and any attachments from any computer. Vaso Corporation and its subsidiary companies are not responsible for data leaks that result from email messages received that contain privileged and confidential and/or protected health information (PHI).

1 0

Re: [CentOS] Is shellcheck safe?
by Vidar Holen 20 Jan '22

20 Jan '22

Hi, ShellCheck author here. Regarding the scanner "Bkav Pro" detecting "VEX.Webshell" according to VirusTotal.com, this is a false positive that seems to trigger on every Haskell binary including a simple "Hello World". It further appears to trigger on a number of unrelated repositories. See internal issue https://github.com/koalaman/shellcheck/issues/2432 The Bkav Corporation does not appear to have a false positive submission process that I could find using Google Translate on bkav.com.vn, but I emailed a general product contact address about it. Hopefully they'll make the check more accurate in the future. Regards, Vidar Holen (Sorry about the bad reply-to, I wasn't on the list when the discussion started)

1 0

Qemu - enabling "bridge mode" for primary physical interface for VMs
by Lists 19 Jan '22

19 Jan '22

I have a physical host with a single physical network adapter. I want to host several VMs on host. (guest1 - guest4) The guest systems are accessible via 192.168.122.* as is the default with qemu/virsh. There are 4 IP addresses being routed to the primary interface on host. I can set up an alias for the NIC and "see" these ip addresses. I understand that it's possible to allow the 4 VM guest systems to each have a "direct" fixed IP address and access the addresses \via the host network adapter, while the host retains its fixed IP. I've been googling like crazy and there is a lot of stale and conflicting information. Has anybody here done this successfully? Host and all guests are running CentOS 8. Thanks. Ben S

3 5

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss