search for: vulenrability

Thanks for the reply. Sorry for the typo in the earlier mail. I have PV-HVM of CentOS 7 & I need to convert it to PV kernel. Basically here I am trying to see whether my PV_HVM kernel is vulenrable to this issue given in the following link http://seclists.org/oss-sec/2015/q3/212 In the above link, it was mentioned that the PV kernel is not vulnerable to this bug, but HVM is. It didnt say

Thanks for the reply. If we want to have PV kernel for CentOs 7 , are there any guidelines to follow? How we can know before hand itself that this kernel is PV or HVM, without installing kernel? On Wed, Aug 19, 2015 at 11:27 AM, John R Pierce <pierce at hogranch.com> wrote: > On 8/18/2015 10:37 PM, Venkateswara Rao Dokku wrote: > >> Thanks for the reply. >> Sorry for the

Hi, I have php 5.4.16 php in my centos 7 machine & when I searched over internet I could see it is effected by some vulenrabilities. So I wanted to upgrade my PHP to 5.6.x, but did not find procedure for it. When I tried yum upgrade php, it says "no packages marked for update" Can you please give me some pointers so that I can continue. On Tue, Apr 28, 2015 at 2:11 AM, Johnny

Hi, I have installed CentOS 7 HVM kernel. I would like to convert it to CentOs 7 PV kernel. When googled about it, I found that this can be done by following commands yum install xen or yum install kernel-xen But, when I tried the below commands, I am getting the error *"No package kernel-xen available.**"* What am I missing here. Any help is much appreciated. -- Thanks &

On 8/18/2015 10:37 PM, Venkateswara Rao Dokku wrote: > Thanks for the reply. > Sorry for the typo in the earlier mail. > I have PV-HVM of CentOS 7 & I need to convert it to PV kernel. > > Basically here I am trying to see whether my PV_HVM kernel is vulenrable to > this issue given in the following link > http://seclists.org/oss-sec/2015/q3/212 that is talking about a

All modern kernels are PV compatible. You can take the same Linux image and run it HVM or PV. On 19 August 2015 at 09:19, Venkateswara Rao Dokku <dvrao.584 at gmail.com> wrote: > Thanks for the reply. > > If we want to have PV kernel for CentOs 7 , are there any guidelines to > follow? > How we can know before hand itself that this kernel is PV or HVM, without >

...pers to ''remove any non-standard string escaping mechanisms from their applications, such as the popular "backslash-escape", or "\''", or at least modify them to use the SQL-standard doubling ('''') to escape quotes.'' In particular, the vulenrability relates to applications that ''use ad-hoc methods to "escape" strings going into the database, such as regexes, or PHP3''s addslashes() and magic_quotes. Since these bypass database-specific code for safe handling of strings, many such applications will need to be re-writt...

Thanks for the replies. The tool that we used for testing the security vulnerability is "Nessus". I have glibc version 2.17-78.el7, I saw that CVE-2015-0235 (Ghost) is fixed in this version and I want to apply patch for the vulnerbailities CVE-2015-1472 & CVE-2015-1473. Can you please help me in finding the right version that has fixes for these? Thanks On Sat, Apr 25, 2015 at