[CentOS] Centos 5.3 -> Apache - Under Attack ? Oh hell....

Wed Jun 17 05:50:06 UTC 2009
Les Mikesell <lesmikesell at gmail.com>

Linux Advocate wrote:
> 
> 
> 
>> cmdshell.php)
>>> ? The horde framework was  installed from the centos repo.....!!!
>>>
>> I don't think the horde set on CentOS is very current. I just used the tarball
>> from the horde website, and I keep it current.
> 
> ok. its just that with centos being a redhat clone and so on. all the rpms they use are suppose to hv been 'vetted' right.... but anywat... its a lesson learnt.

Security and bug fixes are backported to the RH/centos releases as they 
are found.  But you have to run yum to apply them to your system as they 
are available because everyone knows the flaws as soon as they are 
published.

-- 
   Les Mikesell
     lesmikesell at gmail.com