similar to: CentOS newbie question - updates

Hi I'm using CentOS 3, and it's fully patched using yum. Apache reports version 2.0.46 (CentOS) A colleague ran a copy of Nikto, a scripted vuln. finder, against my server, and reported the following problems. The only one I've tested is the directory traversal, and it seems to be an issue. Will the upstream vendor patch these issues in Apache 2.0.46, or not? If not, does anyone know

Hi Everyone More updates for Centos3 Available from: http://mirror.caosity.org/centos-3/3.1/ and soon your local mirror. Security: kernel: https://rhn.redhat.com/errata/RHSA-2004-413.html updates/i386/RPMS/kernel-2.4.21-15.0.4.EL.athlon.rpm updates/i386/RPMS/kernel-2.4.21-15.0.4.EL.i686.rpm updates/i386/RPMS/kernel-BOOT-2.4.21-15.0.4.EL.i386.rpm

I'm running a CentOS 3.4 box. According to yum, the OpenSSL 0.9.7a-33.15 package I have installed is the latest available. A check of the OpenSSL website shows 0.9.7g source being the latest. Is the CentOS 0.9.7a package patched to cover the same isues that the generic 0.9.7 source covers? If not, what's my recourse? Build it by hand? If I need to build it, has anybody crossed that

Greetings from Finland! This is my first contribution. username: MikaH?m?l?inen the proposed subject of your Wiki contribution(s): fix dead link at https://wiki.centos.org/irc the proposed location of your Wiki contribution(s): https://wiki.centos.org/irc At #12: IRC Instructions for Beginners in paragraph "Some of the CentOS IRC channels, most notably *#centos* and *#centos-social*,

i updated to the latest up2date rpm.... then when updating to the latest kernel this is what happened after i ran up2date -fu for the kernel/kernel-source updates Testing package set / solving RPM inter-dependencies... Traceback (most recent call last): File "/usr/sbin/up2date", line 1174, in ? sys.exit(main() or 0) File "/usr/sbin/up2date", line 772, in main

CentOS uses the yum dependency solver for doing updates and not the RHN (normal) up2date mechanism. That is functionality built into up2date. Due to this difference, there is a problem with the Seamonkey upgrade to replace Mozilla using up2date on CentOS-4, because it does not see Seamonkey as obsoleting Mozilla. (This is a problem with the yum depsolver that is included in up2date). Due to

Which is better? Why? I know yum is the official update mechanism here and in Fedora Core, but that doesn't make yum better than up2date any more than Windows NT was better than OS/2. Let's try to keep the discussion objective:-) I'm asking, hoping for some insights into why RH might (apparently) be moving to yum in preference to up2date (yum is now used within Anaconda). Other

Hi all, i have a problem with centos's up2date tool. I have setup a central update server with yam (http://dag.wieers.com/home-made/yam/) under CentOS-4. When yam calls t up2date to download updates, up2date returns this error: Traceback (most recent call last): File "/usr/bin/yam", line 1099, in ? main() File "/usr/bin/yam", line 983, in main

I have found a few issues with puppet and the up2date provider (version 0.22.4) that I''d like to run by those who use up2date (to see if others are experiencing the same issues). 1. Puppet doesn''t seem to find the latest updates of packages that are already installed. In looking at "/usr/lib/site_ruby/1.8/puppet/provider/package/up2date.rb", I found that

I''m troubled with a node-definition not able to resolve a class: Could not find class rhnsd::common at /etc/puppet/manifests/nodes.pp: 8 on node X Content of manifest/site.pp: import "nodes.pp" [...] The layout of modules/rhnsd/ is: |-- files | `-- up2date-rhn |-- manifests | |-- client.pp | |-- common.pp | |-- init.pp | `-- rhn.pp A `cat'' from each

Hi, I have already installed 4.2 on my laptop, I only chose GNOME at install time. I now need to use up2date to install kde (I wish to install twinkle softphone). What is the correct way to do that. I did: up2date kde* up2date -u kde* up2date -i kde* It printed a listing of the packages but did not install them. Thanks, Jerry

List, Being pretty new to CentOS and such, can someone answer a couple of questions about yum and up2date? I think I got the basic info, but I'm a bit confused about what does what. I configured yum to use the dag repo (I think) but now and then, I get the red circle from up2date stuff on the upper menubar. I have been using the up2date function to grab the latest bits when

Hi Folks, as recommended I have only updated up2date , up2date-gnome.# All other packages deselected. Run uptodate - okay. But now I have no channels in up2date - I can't update my system. If I try to start up2date I get this error message: Exception type exceptions.ValueError Exception Handler Information Traceback (most recent call last): File

Hi all, I want to use UP2DATE to alert me to updates that are available but still use yum to make the update. Up2date alerts me and i see what is available and then update with yum. Up2date icon still shows updates are available. How can I get up2date to know that the system has been updated? Thank you. -- Regards Robert Smile... it increases your face value! Linux User #296285

Hello, I?d like to install subversion system in our server (CentOS-4.4) up2date has the subversion-1.1.4-2, but subversion is already on verson 1.4.2 Perhaps I loose good features if I install subversion-1.1.x, but I prefer to use the version delivered by up2date, of course. 1) What do you suggest? If I try to install subversion-1.4.2 from source it asks for apr and apr-util version 0.9.7 or

I am working on some initial testing of puppet and noticed that when using the package type, I see this in my client logs (from different runs): warning: Found multiple default providers for package: up2date, yum; using up2date warning: Found multiple default providers for package: yum, up2date; using yum This is on a CentOS 4.4 client with puppet-0.22.0-1.el4 (from dlutter repo). After

-- -------------- next part -------------- An embedded message was scrubbed... From: Dago Pacheco <informatica at makimet.cl> Subject: Samba problem after Up2date Date: Mon, 11 Feb 2008 11:28:40 -0300 Size: 1464 URL: <http://lists.centos.org/pipermail/centos/attachments/20080211/33399296/attachment.mht>

I would like to know why the version of openssh used in Centos4.4 is based on version 3.9p1 but not on a more recent version of openssh? The vulnerabilities found and corrected in the last version of openssh are also corrected in version 3.9? -------------- next part -------------- An HTML attachment was scrubbed... URL:

All, There are 3 bugfix updates for CentOS-4 (RC1). 1. mod_perl needed to be recompiled after the RH errata for perl was incorporated, but it was not flagged by the perl update. ( https://bugzilla.caosity.org/show_bug.cgi?id=803 ) (thanks Joshua Hirsh) 2. httpd identified itself as Apache/2.0.52 (Red Hat) Server instead of CentOS ( https://bugzilla.caosity.org/show_bug.cgi?id=806 ) (thanks

Hi all. I have a simple question: CentOS relies mostly on "yum" to keep systems up to date, although I understand that like on RHEL, "up2date" is also available. On my system I've run both KDE and GNOME as Graphical Desktops under X (though I presently run GNOME), and I've noticed that there is an applet called "CentOS Network Alert Icon" (from the