Re: [CentOS] CVE-2014-0160 CentOS 6 openssl heartbleed workaround

2014-04-08 Thread Keith Keller
On 2014-04-08, Karanbir Singh wrote: > > Earlier in the day today, we were made aware of a serious > issue in openssl as shipped in CentOS-6.5 ( including updates issued > since CentOS-6.5 was released ); This issue is addressed in detail at > http://heartbleed.com/ So it looks like new packages

Re: [CentOS] Software RAID10 - which two disks can fail?

2014-04-08 Thread Rafał Radecki
The raid10 name is very misleading. I came to the same conclusion yesterday: for sake of clarity I will make two raid1 arrays and combine them into a raid0 ;) Thanks for all info. BR, Rafal. 2014-04-08 8:49 GMT+02:00 Christopher Chan : > On Tuesday, April 08, 2014 03:47 AM, Rafał Radecki wrote

Re: [CentOS] Software RAID10 - which two disks can fail?

2014-04-08 Thread John R Pierce
On 4/8/2014 12:35 AM, Rafał Radecki wrote: > The raid10 name is very misleading. I came to the same conclusion > yesterday: for sake of clarity I will make two raid1 arrays and combine > them into a raid0;) > > Thanks for all info. its striped mirrors, its just that it treats it all as one big rai

Re: [CentOS] CVE-2014-0160 CentOS 6 openssl heartbleed workaround

2014-04-08 Thread Steven Tardy
On Tue, Apr 8, 2014 at 2:56 AM, Keith Keller < kkel...@wombat.san-francisco.ca.us> wrote: > On 2014-04-08, Karanbir Singh wrote: > > > > Earlier in the day today, we were made aware of a serious > > issue in openssl as shipped in CentOS-6.5 ( including updates issued > > since CentOS-6.5 was rele

[CentOS] CentOS-announce Digest, Vol 110, Issue 5

2014-04-08 Thread centos-announce-request
Send CentOS-announce mailing list submissions to centos-annou...@centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-requ..

Re: [CentOS] CVE-2014-0160 CentOS 6 openssl heartbleed workaround

2014-04-08 Thread Peter van Hooft
> Message: 23 > Date: Tue, 8 Apr 2014 07:08:30 -0400 > From: Steven Tardy > Subject: Re: [CentOS] CVE-2014-0160 CentOS 6 openssl heartbleed > workaround > To: CentOS mailing list > Message-ID: > > Content-Type: text/plain; charset=ISO-8859-1 > > On Tue, Apr 8, 2014 at 2:56 AM, Keith

[CentOS] [CentALT] php-redis depedency error.

2014-04-08 Thread sunshareall0709
Hi, All. When I try to install php-redis, there are obvious 4 package hit the depedency. One have already INSTALLED as follow. I've GOOGLED, NOTHING help. How can I get over this? Please Help, Thank you! -- Sunshare -- 2014-04-08 --

Re: [CentOS] [CentALT] php-redis depedency error.

2014-04-08 Thread Maxim Shpakov
Hi! Add exclude=php55* to /etc/yum.repos.d/centalt.repo There are problems regarding php55 dependencies in centalt repo. 2014-04-08 15:26 GMT+03:00 sunshareall0709 : > Hi, All. > When I try to install php-redis, there are obvious 4 package hit the > depedency. > One have already INSTALLED as f

Re: [CentOS] CVE-2014-0160 CentOS 6 openssl heartbleed workaround

2014-04-08 Thread James Hogarth
On 8 April 2014 12:08, Steven Tardy wrote: > On Tue, Apr 8, 2014 at 2:56 AM, Keith Keller < > kkel...@wombat.san-francisco.ca.us> wrote: > > > On 2014-04-08, Karanbir Singh wrote: > > > > > > Earlier in the day today, we were made aware of a serious > > > issue in openssl as shipped in CentOS-6.

Re: [CentOS] CVE-2014-0160 CentOS 6 openssl heartbleed workaround

2014-04-08 Thread Leon Fauster
Am 08.04.2014 um 15:02 schrieb James Hogarth : > On 8 April 2014 12:08, Steven Tardy wrote: > >> On Tue, Apr 8, 2014 at 2:56 AM, Keith Keller < >> kkel...@wombat.san-francisco.ca.us> wrote: >> >>> On 2014-04-08, Karanbir Singh wrote: >>> >>> is there an easy way to know which services need to

Re: [CentOS] USB 3.0 NIC / Sitecom NL-031

2014-04-08 Thread Ned Slider
On 07/04/14 17:31, SilverTip257 wrote: > On Sun, Apr 6, 2014 at 7:09 PM, Ned Slider wrote: > >> On 06/04/14 13:32, Ned Slider wrote: >>> On 05/04/14 19:28, Akemi Yagi wrote: >> >>> >>> >>> ELRepo does have a kmod-asix driver for el6, but it was backported from >>> kernel-3.2 and does not support t

[CentOS] OpenSSL Heartbeat exploit agains KVM guest systems

2014-04-08 Thread James B. Byrne
Is it possible to use this exploit against a kvm guest to read memory used by the host? In other words: if an exploitable service, say httpd with mod_ssl, is running in guest system 'vm1' hosted on system 'virthost' then what implications does that have with respect to guests vm2 and vm3 and to vi

Re: [CentOS] OpenSSL Heartbeat exploit agains KVM guest systems

2014-04-08 Thread Matthew Miller
On Tue, Apr 08, 2014 at 10:11:32AM -0400, James B. Byrne wrote: > Is it possible to use this exploit against a kvm guest to read memory used by > the host? In other words: if an exploitable service, say httpd with mod_ssl, > is running in guest system 'vm1' hosted on system 'virthost' then what >

Re: [CentOS] CVE-2014-0160 CentOS 6 openssl heartbleed workaround

2014-04-08 Thread Keith Keller
On 2014-04-08, James Hogarth wrote: > > Tomcat, apache httpd, postfix, postgresl, mysql... best just to restart any > network facing application that has SSL enabled ;) Actually, I should have been more thorough: I am also interested in knowing which credentials were vulnerable, so I can set poli

Re: [CentOS] How to save a Gnome screen layout on CentOS 6.5 after logging off?

2014-04-08 Thread Nux!
On 08.04.2014 16:32, Gilbert Sebenste wrote: > Hello everyone, > > A quick Gnome question that has vexed me. System -> Startup Applications -> Options -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro ___ CentOS mailing list Cen

[CentOS] How to save a Gnome screen layout on CentOS 6.5 after logging off?

2014-04-08 Thread Gilbert Sebenste
Hello everyone, A quick Gnome question that has vexed me. In CentOS 5.10, if I have, say, an X terminal window up on my screen, the next time I log in, it's there when I log in as an unprivileged user. That's because I can save the layout the way I want to; there's a checkbox for it to save the

Re: [CentOS] How to save a Gnome screen layout on CentOS 6.5 after logging off?

2014-04-08 Thread m . roth
Gilbert Sebenste wrote: > Hello everyone, > > A quick Gnome question that has vexed me. > > In CentOS 5.10, if I have, say, an X terminal window up on my screen, > the next time I log in, it's there when I log in as an unprivileged user. > That's because I can save the layout the way I want to; the

Re: [CentOS] CVE-2014-0160 CentOS 6 openssl heartbleed workaround

2014-04-08 Thread Tony Mountifield
In article , Leon Fauster wrote: > Am 08.04.2014 um 15:02 schrieb James Hogarth : > > On 8 April 2014 12:08, Steven Tardy wrote: > > > >> On Tue, Apr 8, 2014 at 2:56 AM, Keith Keller < > >> kkel...@wombat.san-francisco.ca.us> wrote: > >> > >>> On 2014-04-08, Karanbir Singh wrote: > >>> > >>>

Re: [CentOS] CVE-2014-0160 CentOS 6 openssl heartbleed workaround

2014-04-08 Thread Alain Péan
Le 08/04/2014 19:05, Tony Mountifield a écrit : > And I notice that the new libraries after applying the update are > STILL called 1.0.1e - is that correct? Could be confusing. Because at this time, it's only a workaround that disable certain services, not a fix to the libraries, as I read in the

Re: [CentOS] CVE-2014-0160 CentOS 6 openssl heartbleed workaround

2014-04-08 Thread Steve Clark
On 04/08/2014 01:12 PM, Alain Péan wrote: > Le 08/04/2014 19:05, Tony Mountifield a écrit : >> And I notice that the new libraries after applying the update are >> STILL called 1.0.1e - is that correct? Could be confusing. > Because at this time, it's only a workaround that disable certain > servic

Re: [CentOS] CVE-2014-0160 CentOS 6 openssl heartbleed workaround

2014-04-08 Thread Phil Wyett
On Tue, 2014-04-08 at 19:12 +0200, Alain Péan wrote: > Le 08/04/2014 19:05, Tony Mountifield a écrit : > > And I notice that the new libraries after applying the update are > > STILL called 1.0.1e - is that correct? Could be confusing. > > Because at this time, it's only a workaround that disable

Re: [CentOS] CVE-2014-0160 CentOS 5.x openssl heartbleed workaround

2014-04-08 Thread Lists
On 04/08/2014 10:37 AM, Phil Wyett wrote: > If you: rpm -qa | grep openssl > > If you have: openssl-1.0.1e-16.el6_5.4.0.1 > > You have the package with affected elements disabled. These were made > until the final fixes could be brought in and applied. > > If you have: openssl-1.0.1e-16.el6_5.7 > >

Re: [CentOS] CVE-2014-0160 CentOS 5.x openssl heartbleed workaround

2014-04-08 Thread Frank Cox
On Tue, 08 Apr 2014 11:03:50 -0700 Lists wrote: > What packages do I look for on EL5.X? You don't. The bug doesn't affect el5. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com ___ CentOS mailing list CentOS@centos.org http://li

Re: [CentOS] CVE-2014-0160 CentOS 5.x openssl heartbleed workaround

2014-04-08 Thread Phil Wyett
On Tue, 2014-04-08 at 12:08 -0600, Frank Cox wrote: > On Tue, 08 Apr 2014 11:03:50 -0700 > Lists wrote: > > > What packages do I look for on EL5.X? > > You don't. The bug doesn't affect el5. > Frank is correct. https://bugzilla.redhat.com/show_bug.cgi?id=1084875#c9 The above link has the info

Re: [CentOS] CVE-2014-0160 CentOS 6 openssl heartbleed workaround

2014-04-08 Thread Robert Arkiletian
On Tue, Apr 8, 2014 at 6:23 AM, Leon Fauster wrote: > Am 08.04.2014 um 15:02 schrieb James Hogarth : >> On 8 April 2014 12:08, Steven Tardy wrote: >> >>> On Tue, Apr 8, 2014 at 2:56 AM, Keith Keller < >>> kkel...@wombat.san-francisco.ca.us> wrote: >>> On 2014-04-08, Karanbir Singh wrote: >>

Re: [CentOS] Problem running yum update command

2014-04-08 Thread Darr247
On 08 April 2014 @00:34 zulu, Frank Cox wrote: > On Mon, 07 Apr 2014 20:27:17 -0400 > H wrote: > >> rpm --rebuilddb: >> >> rpmdb: unable to join the environment > When I run that error message through google, this is the very first result: > > http://sysadmingear.blogspot.ca/2008/08/how-to-fix-rpmd

Re: [CentOS] Problem running yum update command

2014-04-08 Thread Jim Perrin
On 04/05/2014 08:46 PM, H wrote: > I am running CentOS 6.5 in a VZ container and today when I wanted to run > yum update command I receive the following error messages: > > rpmdb: unable to join the environment > error: db3 error(11) from dbenv->open: Resource temporarily unavailable > error: c

[CentOS] [OT] PXE Boot / image server for non-profit's computers

2014-04-08 Thread Jason Pyeron
This is the best collection of minds I can think of on this topic, that's why it is on this list. I think it is too subjective for stackoverflow. So here is the problem: The community center has multiple computers for the children (and adult students) to use. These computer are always donated and

Re: [CentOS] [OT] PXE Boot / image server for non-profit's computers

2014-04-08 Thread m . roth
Jason Pyeron wrote: > This is the best collection of minds I can think of on this topic, that's > why it is on this list. I think it is too subjective for stackoverflow. > > So here is the problem: > > The community center has multiple computers for the children (and adult > students) to use. These

Re: [CentOS] [OT] PXE Boot / image server for non-profit's computers

2014-04-08 Thread Drew Weaver
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of m.r...@5-cent.us Sent: Tuesday, April 08, 2014 3:21 PM To: CentOS mailing list Subject: Re: [CentOS] [OT] PXE Boot / image server for non-profit's computers Jason Pyeron wrote: > This is t

Re: [CentOS] [OT] PXE Boot / image server for non-profit's computers

2014-04-08 Thread Robert Arkiletian
On Tue, Apr 8, 2014 at 12:08 PM, Jason Pyeron wrote: > This is the best collection of minds I can think of on this topic, that's why > it > is on this list. I think it is too subjective for stackoverflow. > > So here is the problem: > > The community center has multiple computers for the children

Re: [CentOS] [OT] PXE Boot / image server for non-profit's computers

2014-04-08 Thread Les Mikesell
On Tue, Apr 8, 2014 at 2:08 PM, Jason Pyeron wrote: > This is the best collection of minds I can think of on this topic, that's why > it > is on this list. I think it is too subjective for stackoverflow. > > So here is the problem: > > The community center has multiple computers for the children

Re: [CentOS] CVE-2014-0160 CentOS 6 openssl heartbleed workaround

2014-04-08 Thread Keith Keller
On 2014-04-08, Robert Arkiletian wrote: > > if you include libcrypto in the grep then sshd is affected. That's unfortunate. :( Is the bug in libssl, libcrypto, or both? Since sshd is in doubt, I would like to force my users to change their password, which is stored on a central openldap server

Re: [CentOS] CVE-2014-0160 CentOS 6 openssl heartbleed workaround

2014-04-08 Thread Ionut Hoza
Hi, What else needs to be restarted ? Anything reported by the lsof commands above ? Thank you, I. On Tue, Apr 8, 2014 at 9:33 PM, Robert Arkiletian wrote: > On Tue, Apr 8, 2014 at 6:23 AM, Leon Fauster > wrote: > > Am 08.04.2014 um 15:02 schrieb James Hogarth : > >> On 8 April 2014 12:08,

[CentOS] semi-OT: the trac problem solved

2014-04-08 Thread m . roth
If it's of any interest, I finally solved the trac problem. Turns out you have to be granted TRAC_ADMIN to see/use the admin menus... but what is *not* suggested in anything I read is that, for those of us who might be ssh'ing into a server, and using organization-wide authentication, rather than /

Re: [CentOS] CVE-2014-0160 CentOS 6 openssl heartbleed workaround

2014-04-08 Thread Robert Arkiletian
On Tue, Apr 8, 2014 at 2:08 PM, Keith Keller wrote: > On 2014-04-08, Robert Arkiletian wrote: >> >> if you include libcrypto in the grep then sshd is affected. > > That's unfortunate. :( Is the bug in libssl, libcrypto, or both? > > Since sshd is in doubt, I would like to force my users to chan

Re: [CentOS] CVE-2014-0160 CentOS 6 openssl heartbleed workaround

2014-04-08 Thread Leon Fauster
Am 08.04.2014 um 23:08 schrieb Keith Keller : > On 2014-04-08, Robert Arkiletian wrote: >> >> if you include libcrypto in the grep then sshd is affected. > > That's unfortunate. :( Is the bug in libssl, libcrypto, or both? looking inside - its seems that this issue (cve-2014-0160) is resolv

Re: [CentOS] Problem running yum update command

2014-04-08 Thread H
Thank you. I have now rebuilt the database and also secured the server against the heartbleed bug. I do wonder, however, why the rpm database crashed? It completed the last yum update just fine. On April 8, 2014 2:46:59 PM EDT, Darr247 wrote: >On 08 April 2014 @00:34 zulu, Frank Cox wrote: >> O

Re: [CentOS] CVE-2014-0160 CentOS 6 openssl heartbleed workaround

2014-04-08 Thread Keith Keller
On 2014-04-08, Leon Fauster wrote: > > looking inside - its seems that this issue (cve-2014-0160) is resolved > in ssl/d1_both.c and ssl/t1_lib.c and not in files under crypto/ ... > to say more i have to take a look into the build process. So if it turns out to be true that the bug is in libssl

Re: [CentOS] CVE-2014-0160 CentOS 6 openssl heartbleed workaround

2014-04-08 Thread Lars Hecking
Leon Fauster writes: > Am 08.04.2014 um 23:08 schrieb Keith Keller > : > > On 2014-04-08, Robert Arkiletian wrote: > >> > >> if you include libcrypto in the grep then sshd is affected. > > > > That's unfortunate. :( Is the bug in libssl, libcrypto, or both? > > > looking inside - its seems

Re: [CentOS] [CentALT] php-redis depedency error.

2014-04-08 Thread sunshareall0709
Hi! Thanks for your response! As you said, I've add exclude=php55* to /etc/yum.repos.d/centalt.repo, and install again: -- [sunshare@sunshare ~]$ sudo yum install php-redis

Re: [CentOS] [CentALT] php-redis depedency error.

2014-04-08 Thread sunshareall0709
THANK YOU! This DO help. cd ~ wget -c http://dl.fedoraproject.org/pub/epel/6/x86_64/php-redis-2.2.2-5.git6f7087f.el6.x86_64.rpm sudo yum -y install ~/php-redis-2.2.2-5.git6f7087f.el6.

[CentOS] Logrotate errors

2014-04-08 Thread C. L. Martinez
Hi all, I have a problem with logrotate and I don't know why. In /var/log/messages appears these errors: Apr 8 15:01:01 plzfnsm02 logrotate: ALERT exited abnormally with [1] Apr 8 16:01:01 plzfnsm02 logrotate: ALERT exited abnormally with [1] Apr 8 17:01:01 plzfnsm02 logrotate: ALERT exited a