Discuss

discuss@lists.centos.org

5 participants
34752 discussions

CentOS-announce Digest, Vol 7, Issue 1
by centos-announce-request＠centos.org 01 Sep '05

01 Sep '05

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2005:0831-001 Important CentOS 4 i386 php - security update (CENTOSPLUS only) (Johnny Hughes) 2. CESA-2005:0831-001 Important CentOS 4 x86_64 php - security update (CENTOSPLUS only) (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 31 Aug 2005 16:06:57 -0500 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2005:0831-001 Important CentOS 4 i386 php - security update (CENTOSPLUS only) To: CentOS-Announce <centos-announce(a)centos.org> Message-ID: <1125522417.10751.37.camel(a)myth.home.local> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2005:0831-001 Important CentOS 4 i386 php - security update This CESA is for the version of php is that is included in the centosplus repo for CentOS-4 ... this is not an update to the main CentOS-4 repo. ---------------- Name : php Relocations: (not relocatable) Version : 5.0.4 Vendor: CentOS Release : 3.centos4 Build Date: 31 Aug 2005 12:15:26 AM UTC Install Date: (not installed) Build Host: C4i386-build Group : Development/Languages Source RPM: php-5.0.4-3.centos4.src.rpm License: The PHP License Packager : Johnny Hughes <johnny(a)centos.org> URL : http://www.php.net/ Summary : The PHP HTML-embedded scripting language. (PHP: Hypertext Preprocessor) Description : PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated webpages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. The mod_php module enables the Apache Web server to understand and process the embedded PHP language in Web pages. ---------------- Update Information: This update is considered important by the CentOS Development Team. A bug was discovered in the PEAR XML-RPC Server package included in PHP. If a PHP script is used which implements an XML-RPC Server using the PEAR XML-RPC package, then it is possible for a remote attacker to construct an XML-RPC request which can cause PHP to execute arbitrary PHP commands as the 'apache' user. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2005-2498 to this issue. All Users of PHP-5 from the CentOSPlus Repo should upgrade to these updated packages. More info is available at: http://rhn.redhat.com/errata/RHSA-2005-748.html https://www.redhat.com/archives/fedora-announce-list/2005-August/msg00118.h… ------------------------ The following updated files have been uploaded and are currently syncing to the mirrors: i386: php-5.0.4-3.centos4.i386.rpm php-bcmath-5.0.4-3.centos4.i386.rpm php-dba-5.0.4-3.centos4.i386.rpm php-devel-5.0.4-3.centos4.i386.rpm php-gd-5.0.4-3.centos4.i386.rpm php-imap-5.0.4-3.centos4.i386.rpm php-ldap-5.0.4-3.centos4.i386.rpm php-mbstring-5.0.4-3.centos4.i386.rpm php-mysql-5.0.4-3.centos4.i386.rpm php-ncurses-5.0.4-3.centos4.i386.rpm php-odbc-5.0.4-3.centos4.i386.rpm php-pear-5.0.4-3.centos4.i386.rpm php-pgsql-5.0.4-3.centos4.i386.rpm php-snmp-5.0.4-3.centos4.i386.rpm php-soap-5.0.4-3.centos4.i386.rpm php-xml-5.0.4-3.centos4.i386.rpm php-xmlrpc-5.0.4-3.centos4.i386.rpm src: php-5.0.4-3.centos4.src.rpm

1 0

Mod_auth_mysql
by Thomas E Dukes 01 Sep '05

01 Sep '05

Hello, I just upgraded from WBEL 4 to Centos 4.1 per the FAQ. I'm pretty sure after running 'yum update', mysql and apache were updated. I was previously using mod_auth_mysql under WBEL 4 to password protect several directories but now things seem to be broken. When I go to a password protected directory I get an Internal Server Error 500. The only explanation in the error log is "no user file?" Any ideas? TIA

4 8

Re: [CentOS] Trying to control the torrent of spam...
by Kirk Bocek 31 Aug '05

31 Aug '05

> On Sun, 2005-08-28 at 11:01, Preston Crawford wrote: > If you were running your own MTA I would recommend you implement > greylisting. This would eliminate >98% of spam with little or nor > impact to your MTA servers resources. On my CentOS 3.5 sendmail server I simply added: FEATURE(`blacklist_recipients')dnl dnl # dnl # dnsbl - DNS based Blackhole List/Black List/Rejection list dnl # See http://www.sendmail.org/m4/features.html#dnsbl dnl # FEATURE(`dnsbl', `bl.spamcop.net', `"Spam blocked see: http://spamcop.net/bl.shtml?"$&{client_addr}')dnl FEATURE(`dnsbl', `relays.ordb.org', `"Spam blocked see: http://ordb.org/lookup/?host="$&{client_addr}')dnl FEATURE(`dnsbl', `cbl.abuseat.org', `"Spam blocked see: http://cbl.abuseat.org/lookup.cgi?ip="$&{client_addr}')dnl FEATURE(`dnsbl', `sbl.spamhaus.org', `"Spam blocked see: http://spamhaus.org/query/bl?ip="$&{client_addr}')dnl FEATURE(`dnsbl', `list.dsbl.org', `"Spam blocked see: http://dsbl.org/listing?"$&{client_addr}')dnl to my sendmail.mc file. I'm sure it will work in CentOS 4. I forget where I found the instructions for blacklisting. This has dramatically reduced the spam on my server. Kirk Bocek

1 0

Via 4610 RAID chipset on ASUS P4P800 under CentOS 4.1
by Solar Canine 31 Aug '05

31 Aug '05

Has anyone had any success getting this chipset's ATA RAID controller to appear under CentOS 4.1? If so, can they break it down for me in easy to understand steps?

1 0

SELinux
by Craig White 31 Aug '05

31 Aug '05

I'm probably dense - CentOS 4.1 # cat /etc/sysconfig/selinux ..snip... SELINUXTYPE=targeted # su - Alec # tail -n 3 /var/log/messages Aug 31 08:48:26 srv1 su(pam_unix)[31435]: session opened for user Alec by root(uid=0) Aug 31 08:48:26 srv1 su[31435]: Warning! Could not relabel /dev/pts/0 with user_u:object_r:devpts_t, not relabeling.Operation not permitted Aug 31 08:48:27 srv1 su(pam_unix)[31435]: session closed for user Alec restorecon -v /dev/pts/0 or restorecon -R /dev/pts don't help My interest is actually trying to remotely run a vnc session to a different computer. I connect to it via ssh # ssh -XC -p XXXX root@fqdn and then run vncviewer # vncviewer 192.168.1.253:0 VNC viewer for X version 4.0 - built Feb 21 2005 15:39:30 Copyright (C) 2002-2004 RealVNC Ltd. See http://www.realvnc.com for information on VNC. vncviewer: unable to open display "" so I was thinking I would try to set up vncserver as the user on that machine but unable to su to a shell for that user means I can't run vncpassword for that user. ;-( Anyone want to toss me a bone on any of these issues (I have been reading SELinux notes at Fedora 3 Craig

1 1

iptables help request
by James Pifer 31 Aug '05

31 Aug '05

I have a server running on CentOS that sits being another firewall. I want to forward a certain ports to another server, but only for a handful of addresses. Can anyone assist with an example rule of this? For example, let's say I wanted requests from 24.83.77.24 and 63.47.50.16 on port 10001 to forward to internal server 192.168.1.15 All other requests for THAT port would be rejected or dropped. Anyone willing to give me an example rule that would allow this to be forwarded? I appreciate any help. Thanks, James

2 1

Tux on Centos 4.x x86_64
by Alan Hodgson 31 Aug '05

31 Aug '05

Is anyone successfully running Tux on Centos 4.1 x86_64? If so, what version? Thanks in advance for any info. -- In a world where the citizens of most developed nations have half their incomes wrested from them by the state (slaves only paid about a quarter, effectively), how widely supported do you think the idea of "freedom" really is?

2 2

mnt usb hard drive
by Filianx 31 Aug '05

31 Aug '05

Hi all, can anyone tell me how to mount my usb hdd, all other usb peripherals get picked up ok cheers in advance -- Filianx

4 6

CentOS-announce Digest, Vol 6, Issue 15
by centos-announce-request＠centos.org 31 Aug '05

31 Aug '05

1 0

USB DIsk and mount point
by Jesús García González 30 Aug '05

30 Aug '05

Hello. I use Centos 4.1 When I inserted my usb 2.0 disk for the first time it created the mount point /media/usbdisk just fine. Which I used to mount the disk. But as soon as I used it in another computer (winxp) when I took the usb back to centos the mount point had become /media/IOMEGA (yeah it's an iomega driver) but then as time goes by, the mount point every time the disk is used else where the mount point changes from /media/___________ to whatever other garble you can think of.... Now Executing a mount /media/_what_ever_is_today_ will mount the usb disk just fine without any problems. Why does the mount point changes so erratically??? J.

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss