[CentOS] PHP vulnerability CVE-2016-4073

2016-09-21 Thread Прокси
Hello, My server with CentOS 6.8 just failed PCI scan, so I'm looking into vulnerable packages. PHP 5.3.3 have multiple vulnerabilities, some of them are fixed/patched or have some kind of workaround. But I can't find a way to fix this one. Red Hat state: under investigation. https://access.redha

Re: [CentOS] PHP vulnerability CVE-2016-4073

2016-09-21 Thread Adrian Sevcenco
On 09/21/2016 02:02 PM, Прокси wrote: > Hello, > > My server with CentOS 6.8 just failed PCI scan, so I'm looking into > vulnerable packages. PHP 5.3.3 have multiple vulnerabilities, some of > them are fixed/patched or have some kind of workaround. But I can't find > a way to fix this one. Red Hat

Re: [CentOS] PHP vulnerability CVE-2016-4073

2016-09-21 Thread Eero Volotinen
https://pci.qualys.com/static/help/merchant/questionnaires/compensating_controls_definition.htm Eero 2016-09-21 14:02 GMT+03:00 Прокси : > Hello, > > My server with CentOS 6.8 just failed PCI scan, so I'm looking into > vulnerable packages. PHP 5.3.3 have multiple vulnerabilities, some of > them

Re: [CentOS] ipset and blacklisting

2016-09-21 Thread Albert McCann
How are you saving and reloading the ipsets over a reboot? > -Original Message- > From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On > Behalf Of TE Dukes > Sent: Tuesday, September 20, 2016 9:46 PM > To: 'CentOS mailing list' > Subject: [CentOS] ipset and blacklisting >

Re: [CentOS] PHP vulnerability CVE-2016-4073

2016-09-21 Thread Прокси
On 2016-Sep-21 14:35, Adrian Sevcenco wrote: > On 09/21/2016 02:02 PM, Прокси wrote: > > Hello, > > > > My server with CentOS 6.8 just failed PCI scan, so I'm looking into > > vulnerable packages. PHP 5.3.3 have multiple vulnerabilities, some of > > them are fixed/patched or have some kind of work

Re: [CentOS] PHP vulnerability CVE-2016-4073

2016-09-21 Thread Прокси
On 2016-Sep-21 14:45, Eero Volotinen wrote: > https://pci.qualys.com/static/help/merchant/questionnaires/compensating_controls_definition.htm > > Eero Well, I was hoping to get some ideas for compensating controls in this case. Anyhow, I just added mb_strcut() to disable_functions. I'll be able t

Re: [CentOS] ipset and blacklisting

2016-09-21 Thread tdukes
Original Message Subject: Re: [CentOS] ipset and blacklisting From: "Albert McCann" Date: Wed, September 21, 2016 5:34 am To: "'CentOS mailing list'" How are you saving and reloading the ipsets over a reboot? > -Original Message- > From: centos-boun...@centos.org [m

Re: [CentOS] ipset and blacklisting

2016-09-21 Thread Albert McCann
> -Original Message- > From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On > Behalf Of tdu...@palmettoshopper.com > Sent: Wednesday, September 21, 2016 9:10 AM > To: CentOS mailing list > Subject: Re: [CentOS] ipset and blacklisting > I do a: > > ipset save blacklist, a

Re: [CentOS] Using keepass on Centos 6

2016-09-21 Thread H
On September 20, 2016 3:43:17 PM EDT, H wrote: >Is anyone running keepass on C6? I have a rather large password >database under Windows that I want also to use on my Centos systems. It >seems that keepass is not available, it relies on mono and there may be >bugs. > >Googling also seems to suggest

Re: [CentOS] Using keepass on Centos 6

2016-09-21 Thread Gordon Messmer
On 09/21/2016 06:50 AM, H wrote: Thank you, downloaded and installed keepassx2 from EPEL since keepassx seemed to suffer from a bug per the home page. Which URL describes the bug? The database opened fine but unfortunately the KeeFox extension for Firefox does not seem to be compatible...

Re: [CentOS] Using keepass on Centos 6

2016-09-21 Thread Valeri Galtsev
On Wed, September 21, 2016 10:57 am, Gordon Messmer wrote: > On 09/21/2016 06:50 AM, H wrote: >> Thank you, downloaded and installed keepassx2 from EPEL since keepassx >> seemed to suffer from a bug per the home page. > > Which URL describes the bug? > >> The database opened fine but unfortunate

Re: [CentOS] Using keepass on Centos 6

2016-09-21 Thread H
On September 21, 2016 11:57:14 AM EDT, Gordon Messmer wrote: >On 09/21/2016 06:50 AM, H wrote: >> Thank you, downloaded and installed keepassx2 from EPEL since >keepassx seemed to suffer from a bug per the home page. > >Which URL describes the bug? > >> The database opened fine but unfortunatel

Re: [CentOS] Using keepass on Centos 6

2016-09-21 Thread H
On September 21, 2016 12:10:18 PM EDT, Valeri Galtsev wrote: > >On Wed, September 21, 2016 10:57 am, Gordon Messmer wrote: >> On 09/21/2016 06:50 AM, H wrote: >>> Thank you, downloaded and installed keepassx2 from EPEL since >keepassx >>> seemed to suffer from a bug per the home page. >> >> Which

Re: [CentOS] PHP vulnerability CVE-2016-4073

2016-09-21 Thread Alice Wonder
On 09/21/2016 05:43 AM, Прокси wrote: On 2016-Sep-21 14:35, Adrian Sevcenco wrote: On 09/21/2016 02:02 PM, Прокси wrote: Hello, My server with CentOS 6.8 just failed PCI scan, so I'm looking into vulnerable packages. PHP 5.3.3 have multiple vulnerabilities, some of them are fixed/patched or

Re: [CentOS] Using keepass on Centos 6

2016-09-21 Thread Gordon Messmer
On 09/21/2016 09:16 AM, H wrote: I wish there was one, it makes all the difference by allowing automated login to websites. Maybe you should take another look at keepass, then? Mono is available in EPEL. keepass runs reasonably well in it. keefox should work as expected. The technical b

Re: [CentOS] Using keepass on Centos 6

2016-09-21 Thread H
On September 21, 2016 2:25:37 PM EDT, Gordon Messmer wrote: >On 09/21/2016 09:16 AM, H wrote: >> I wish there was one, it makes all the difference by allowing >automated login to websites. > > >Maybe you should take another look at keepass, then? Mono is available > >in EPEL. keepass runs reaso

Re: [CentOS] Using keepass on Centos 6

2016-09-21 Thread Frank Cox
On Wed, 21 Sep 2016 14:30:43 -0400 H wrote: > what other password managers are people using, if any? I personally use revelation. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com ___ CentOS mailing list CentOS@centos.org https:

Re: [CentOS] CentOS 6.8, Iptables 1.4.7, and MASQUERADE

2016-09-21 Thread geo.inbox.ignored
On 09/20/2016 04:03 PM, Robert Heller wrote: > I have a server that is also a firewall router at a public library with > a fiber optic Internet connection. It is running kernel > 2.6.32-642.4.2.el6.x86_64 (current CentOS 6.8) and Iptables 1.4.7 > (current stock CentOS 6.8). I having trouble with

Re: [CentOS] Using keepass on Centos 6

2016-09-21 Thread Charles Whitby
sticky notes On Wed, Sep 21, 2016 at 2:45 PM, Frank Cox wrote: > On Wed, 21 Sep 2016 14:30:43 -0400 > H wrote: > > > what other password managers are people using, if any? > > I personally use revelation. > > -- > MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com > __

Re: [CentOS] Using keepass on Centos 6

2016-09-21 Thread Gordon Messmer
On 09/21/2016 11:30 AM, H wrote: You are right, I'll look at it again. Let me ask, what other password managers are people using, if any? I use keepass, but I know people who like: https://www.passwordstore.org/ ___ CentOS mailing list CentOS@cent

[CentOS] CentOS-6.8 PCI Hwdr issue?

2016-09-21 Thread James B. Byrne
I have begun to see these messages in my morning reports: WARNING: Kernel Errors Present pciehp :00:1c.0:pcie04: Link Training Error occurs ...: 146 Time(s) pciehp 0ng Error occurs ...: 1 Time(s) pcieport :00:1c.0: bridge window [mem 0xd0a00.0 failed with error -22

Re: [CentOS] Using keepass on Centos 6

2016-09-21 Thread Keith Keller
On 2016-09-21, Gordon Messmer wrote: > On 09/21/2016 11:30 AM, H wrote: >> You are right, I'll look at it again. Let me ask, what other password >> managers are people using, if any? > > > I use keepass, but I know people who like: > > https://www.passwordstore.org/ This looks very cool, but is

Re: [CentOS] Using keepass on Centos 6

2016-09-21 Thread Valeri Galtsev
On Wed, September 21, 2016 4:30 pm, Keith Keller wrote: > On 2016-09-21, Gordon Messmer wrote: >> On 09/21/2016 11:30 AM, H wrote: >>> You are right, I'll look at it again. Let me ask, what other password >>> managers are people using, if any? >> >> >> I use keepass, but I know people who like: >

Re: [CentOS] Using keepass on Centos 6

2016-09-21 Thread Keith Keller
On 2016-09-21, Valeri Galtsev wrote: > > On Wed, September 21, 2016 4:30 pm, Keith Keller wrote: >> On 2016-09-21, Gordon Messmer wrote: >>> On 09/21/2016 11:30 AM, H wrote: >>> >>> https://www.passwordstore.org/ >> >> This looks very cool, but is there a version for Android? One of the >> reaso

Re: [CentOS] Using keepass on Centos 6

2016-09-21 Thread Valeri Galtsev
On Wed, September 21, 2016 5:15 pm, Keith Keller wrote: > On 2016-09-21, Valeri Galtsev wrote: >> >> On Wed, September 21, 2016 4:30 pm, Keith Keller wrote: >>> On 2016-09-21, Gordon Messmer wrote: On 09/21/2016 11:30 AM, H wrote: https://www.passwordstore.org/ >>> >>> This looks

Re: [CentOS] Using keepass on Centos 6

2016-09-21 Thread Gordon Messmer
On 09/21/2016 02:48 PM, Valeri Galtsev wrote: I use KeepassX. That one has versions for pretty much all open source systems (Linux, *BSD) and for variety of others widely used systems: MacOS, Android, iOS, MS Windows (just listed the ones I know of). So we're back to this... KeepassX is compat

Re: [CentOS] Using keepass on Centos 6

2016-09-21 Thread Valeri Galtsev
On Wed, September 21, 2016 5:25 pm, Gordon Messmer wrote: > On 09/21/2016 02:48 PM, Valeri Galtsev wrote: >> I use KeepassX. That one has versions for pretty much all open source >> systems (Linux, *BSD) and for variety of others widely used systems: >> MacOS, Android, iOS, MS Windows (just listed