Hi,
I haven't updated my centos 4.3 machine in weeks but when I run yum update / yum upgrade no updates seem to be Reading repository metadata in from local files No Packages marked for Update/Obsoletionavailable on the default repo's and dag's repo?
"Reading repository metadata in from local files No Packages marked for Update/Obsoletion"
yum install $program stills works tho, is this normal behaviour or is there something wrong with my updates?
ivago
D Ivago wrote:
Hi, I haven't updated my centos 4.3 machine in weeks but when I run yum update / yum upgrade no updates seem to be Reading repository metadata in from local files No Packages marked for Update/Obsoletionavailable on the default repo's and dag's repo?
It would be helpful if you could give us some more information about what happens:
The output of "rpm -q centos-release" for example and the output of "yum -d5 update".
Cheers,
Ralph
It would be helpful if you could give us some more information about what happens:
The output of "rpm -q centos-release" for example and the output of "yum -d5 update".
Hi Ralph,
here the output i'm getting from the above commands:
rpm -q centos-release gives centos-release-4-4.2 and autoupdate is off # /sbin/chkconfig --list yum yum 0:off 1:off 2:off 3:off 4:off 5:off 6:off
the last command gave the following:
# yum -d5 update Yum Version: 2.4.3 COMMAND: yum -d5 Installroot: / Setting up Update Process Setting up repositories Baseurl(s) for repo: ['http://apt.sw.be/redhat/el4/en/x86_64/dag'] dag 100% |=========================| 1.1 kB 00:00 Baseurl(s) for repo: ['http://linux.dell.com/repo/software/rhel4/', ' http://linux.dell.com/repo/software/rhel4/'] dell-software 100% |=========================| 951 B 00:00 Baseurl(s) for repo: [' http://distrib-coffee.ipsl.jussieu.fr/pub/linux/centos/4.4/updates/x86_64/', 'http://centos.crazyfrogs.org/4.4/updates/x86_64/', ' http://centose.centos.org/centos/4.4/updates/x86_64/', ' http://centosh.centos.org/centos/4.4/updates/x86_64/', ' http://centosb2.centos.org/centos/4.4/updates/x86_64/', ' http://centosj.centos.org/centos/4.4/updates/x86_64/', ' http://centosi.centos.org/centos/4.4/updates/x86_64/', ' http://centosl.centos.org/centos/4.4/updates/x86_64/', ' http://centost.centos.org/centos/4.4/updates/x86_64/', ' http://centosq.centos.org/centos/4.4/updates/x86_64/'] update 100% |=========================| 951 B 00:00 Baseurl(s) for repo: ['http://ftp.belnet.be/packages/centos/4.4/os/x86_64/', 'http://mirrors.ircam.fr/pub/CentOS/4.4/os/x86_64/', ' http://distrib-coffee.ipsl.jussieu.fr/pub/linux/centos/4.4/os/x86_64/', ' ftp://ftp.free.fr/mirrors/ftp.centos.org/4.4/os/x86_64/', ' http://centos.crazyfrogs.org/4.4/os/x86_64/', ' http://archive.cs.uu.nl/mirror/Linux/centos/4.4/os/x86_64/', ' http://ftp.nluug.nl/ftp/pub/os/Linux/distr/CentOS/4.4/os/x86_64/', ' http://centos.intergenia.de/4.4/os/x86_64/', ' http://wftp.tu-chemnitz.de/pub/linux/centos/4.4/os/x86_64/', ' http://ftp-stud.fht-esslingen.de/pub/Mirrors/centos/4.4/os/x86_64/'] base 100% |=========================| 1.1 kB 00:00 Baseurl(s) for repo: [' http://ftp.belnet.be/packages/centos/4.4/addons/x86_64/', ' http://distrib-coffee.ipsl.jussieu.fr/pub/linux/centos/4.4/addons/x86_64/', 'ftp://ftp.free.fr/mirrors/ftp.centos.org/4.4/addons/x86_64/', ' http://mirrors.ircam.fr/pub/CentOS/4.4/addons/x86_64/', ' http://centos.crazyfrogs.org/4.4/addons/x86_64/', ' http://ftp.nluug.nl/ftp/pub/os/Linux/distr/CentOS/4.4/addons/x86_64/', ' http://archive.cs.uu.nl/mirror/Linux/centos/4.4/addons/x86_64/', ' http://ftp.hosteurope.de/mirror/centos.org/4.4/addons/x86_64/', ' http://wftp.tu-chemnitz.de/pub/linux/centos/4.4/addons/x86_64/', ' http://ftp-stud.fht-esslingen.de/pub/Mirrors/centos/4.4/addons/x86_64/'] addons 100% |=========================| 951 B 00:00 Baseurl(s) for repo: [' http://ftp.belnet.be/packages/centos/4.4/extras/x86_64/', ' ftp://ftp.free.fr/mirrors/ftp.centos.org/4.4/extras/x86_64/', ' http://mirrors.ircam.fr/pub/CentOS/4.4/extras/x86_64/', ' http://distrib-coffee.ipsl.jussieu.fr/pub/linux/centos/4.4/extras/x86_64/', 'http://centos.crazyfrogs.org/4.4/extras/x86_64/', ' http://ftp.nluug.nl/ftp/pub/os/Linux/distr/CentOS/4.4/extras/x86_64/', ' http://archive.cs.uu.nl/mirror/Linux/centos/4.4/extras/x86_64/', ' http://ftp-stud.fht-esslingen.de/pub/Mirrors/centos/4.4/extras/x86_64/', ' http://ftp.hosteurope.de/mirror/centos.org/4.4/extras/x86_64/', ' http://centos.intergenia.de/4.4/extras/x86_64/'] extras 100% |=========================| 1.1 kB 00:00 Reading repository metadata in from local files Setting up Package Sacks Excluding Incompatible Archs Finished Reading Local RPMDB Building updates object No Packages marked for Update/Obsoletion
D Ivago wrote:
It would be helpful if you could give us some more information about what happens: The output of "rpm -q centos-release" for example and the output of "yum -d5 update".
Hi Ralph, here the output i'm getting from the above commands: rpm -q centos-release gives centos-release-4-4.2 and autoupdate is off # /sbin/chkconfig --list yum yum 0:off 1:off 2:off 3:off 4:off 5:off 6:off the last command gave the following: # yum -d5 update
[...]
Well, that looks as if everything is okay and no updates are needed.
Reading repository metadata in from local files Setting up Package Sacks Excluding Incompatible Archs Finished Reading Local RPMDB Building updates object No Packages marked for Update/Obsoletion
No packages have been excluded, so you should be up to date with your system.
Take a look at /var/log/yum.log to see when the last packages were updated.
Cheers,
Ralph
No packages have been excluded, so you should be up to date with your system.
Take a look at /var/log/yum.log to see when the last packages were updated.
Hi,
it seems that 24/12/06 was the last time that system got updated according to the yum log, so I guess that since no new updates have been issued,
One system got compromised last night and I'm looking for an anwser how... it's probably via a vulnerability in a PHP script but just wanted o be sure.
Thanks for the help Ralph!
ivago
D Ivago wrote:
it seems that 24/12/06 was the last time that system got updated according to the yum log, so I guess that since no new updates have been issued, One system got compromised last night and I'm looking for an anwser how... it's probably via a vulnerability in a PHP script but just wanted o be sure.
Nope, there have been updates since 24/12/06. Seamonkey, firefox, thunderbird, devhelp and rdesktop at least. Though if you have a server, the graphical stuff probably wouldn't be there.
Ralph
On Fri, 12 Jan 2007 13:42:44 +0100, Ralph Angenendt wrote:
D Ivago wrote:
it seems that 24/12/06 was the last time that system got updated according to the yum log, so I guess that since no new updates have been issued, One system got compromised last night and I'm looking for an anwser how... it's probably via a vulnerability in a PHP script but just wanted o be sure.
Nope, there have been updates since 24/12/06. Seamonkey, firefox, thunderbird, devhelp and rdesktop at least. Though if you have a server, the graphical stuff probably wouldn't be there.
Ralph
I run CentOS4.4 386 on a server. The last update was 12/23/2006 like the original poster. The only package that came out after that date was openoffice as of 1/11/2007. There are a couple of new packages that were out yesterday, but things like firefox and thunderbird have not been updated since 12/23/2006.
Akemi
On Fri, Jan 12, 2007 at 09:17:39AM -0800, Akemi Yagi wrote:
I run CentOS4.4 386 on a server. The last update was 12/23/2006 like the original poster. The only package that came out after that date was openoffice as of 1/11/2007. There are a couple of new packages that were out yesterday, but things like firefox and thunderbird have not been updated since 12/23/2006.
For CentOS 4.4, 12/22 firefox, seamonkey, thunderbird, devhelp 12/23 tar 1/11 openoffice.org, libgsf, xorg
I had been wondering about the updates itself since I'd seen some RHEL4 patches on my work machine, and I noticed CentOS 3 was getting updates. Yesterday CentOS 4 caught up :-)
On Fri, 12 Jan 2007, Akemi Yagi wrote:
I run CentOS4.4 386 on a server. The last update was 12/23/2006 like the original poster. The only package that came out after that date was openoffice as of 1/11/2007. There are a couple of new packages that were out yesterday, but things like firefox and thunderbird have not been updated since 12/23/2006.
Two approaches surface -- in looking at the 'server' related updates since late December, I really do not see any, nor, indeed, know of any from Centos' participation in the public and certain private vulnerability clearinghoues. No unpatched public vulnerabilities ** in a server context** have been patched in the last couple weeks.
I monitor the security reporting email address for the project as well, along with some other project members, and know of no public live *server* issues at the moment. [ security@centos.org ]
Alternatively, one can install something just patched, [say: xorg-x11-libs as it reasonably light as to packages it may pull in] and see if one gets the updated version:
[herrold@dhcp-69 ~]$ rpm -qi xorg-x11-libs Name : xorg-x11-libs Relocations: (not relocatable) Version : 6.8.2 Vendor: CentOS Release : 1.EL.13.37.5 Build Date: Thu 11 Jan 2007 11:58:49 PM EST Install Date: Fri 12 Jan 2007 10:24:32 AM EST Build Host: builder6.centos.org Group : System Environment/Libraries Source RPM: xorg-x11-6.8.2-1.EL.13.37.5.src.rpm Size : 6901938 License: MIT/X11, and others Signature : DSA/SHA1, Fri 12 Jan 2007 12:49:36 AM EST, Key ID a53d0bab443e1821 URL : http://xorg.freedesktop.org Summary : Shared libraries needed by the X Window System Description : This package contains the shared libraries required for running X applications.
If this is not observed, I would really have to suspect that you have a non-standard configuration, possibly provided by the bandwidth and hosting vendor you are using, which is pointing at non-stock update archives. This is commonly seen with some colo providers and their so-called 'CentOS' installations
To diagnose this, please run the following:
[herrold@dhcp-69 yum.repos.d]$ rpm -qf \ /etc/yum.repos.d/CentOS-Base.repo && md5sum \ /etc/yum.repos.d/CentOS-Base.repo && rpm -V centos-release centos-release-4-4.2 dcfda3e584bd570a7b820817e355d46d /etc/yum.repos.d/CentOS-Base.repo [herrold@dhcp-69 yum.repos.d]$
If your values do not match, there is a problem which your provider needs to address.
- Russ Herrold herrold@centos.org as well as herrold@owlriver.com
Akemi Yagi wrote:
On Fri, 12 Jan 2007 13:42:44 +0100, Ralph Angenendt wrote:
Nope, there have been updates since 24/12/06. Seamonkey, firefox, thunderbird, devhelp and rdesktop at least. Though if you have a server, the graphical stuff probably wouldn't be there.
Ralph
I run CentOS4.4 386 on a server. The last update was 12/23/2006 like the original poster. The only package that came out after that date was openoffice as of 1/11/2007. There are a couple of new packages that were out yesterday, but things like firefox and thunderbird have not been updated since 12/23/2006.
Okay, my mistake then. I was on holidays around 2006-12-24 and haven't rechecked dates against what yum.log told me.
Regards,
Ralph
On Fri, 2007-01-12 at 10:43 +0100, D Ivago wrote:
Hi,
I haven't updated my centos 4.3 machine in weeks but when I run yum update / yum upgrade no updates seem to be Reading repository metadata in from local files No Packages marked for Update/Obsoletionavailable on the default repo's and dag's repo?
"Reading repository metadata in from local files No Packages marked for Update/Obsoletion"
yum install $program stills works tho, is this normal behaviour or is there something wrong with my updates?
ivago
If you have a 4.3 and you have not updated it in more than a month and if still does not update, then yes ... you have something broken in your repo setup ...
UNLESS ... do:
chkconfig --list yum
if that says this:
yum 0:off 1:off 2:off 3:on 4:off 5:on 6:off
(or something similar ... then you are getting autoupdates)