similar to: Centos security update

Thanks for the replies. The tool that we used for testing the security vulnerability is "Nessus". I have glibc version 2.17-78.el7, I saw that CVE-2015-0235 (Ghost) is fixed in this version and I want to apply patch for the vulnerbailities CVE-2015-1472 & CVE-2015-1473. Can you please help me in finding the right version that has fixes for these? Thanks On Sat, Apr 25, 2015 at

On 4/24/2015 12:14 PM, Alexander Dalloz wrote: > Am 24.04.2015 um 11:21 schrieb Venkateswara Rao Dokku: >> I was using CentOS 7 and when I ran some custom commercial security >> scan on >> my machine, I found about 122 vulnerabilities. > > That's why those scans are wasted money. From a security management > point of view they neither help you nor your manager.

just for my curiosity, How can we make sure that its not affected? Is there any script to check whether its vulnerable or not (as in bash shell shock vulnerability test)? On Tue, Mar 31, 2015 at 12:25 PM, Eero Volotinen <eero.volotinen at iki.fi> wrote: > Centos 5 is not affected by this bug, so fix is not available. > > Eero > 31.3.2015 9.48 ap. kirjoitti "Venkateswara

Hi All, I wanted to fix the openssl vulnerabilities (CVE-2014-3569, CVE-2014-3570, CVE-2014-3571, CVE-2014-3572) in my CentOS 5.5 and found out that 0.9.8zd has the fixes I am looking for (from the https://www.openssl.org/news/vulnerabilities.html link). But, When I tried to find the openssl-0.9.8zd rpm package, I did not find it in http://mirror.centos.org/centos/5/updates/x86_64/RPMS/. The

Thanks for the reply. Where can we get the info regarding whether its fixed in CentOS 5 or not? I did rpm -q --changelog <glibc> | grep <CVE> but I dont find any info on this. This might means 3 things. 1. The version is not affected so no fix 2. The version is affected, still no fix 3. Fix applied, but not shown in o/p Thanks On Fri, Jun 5, 2015 at 2:06 PM, John Tall <mjtallx

Thanks for the reply. If we want to have PV kernel for CentOs 7 , are there any guidelines to follow? How we can know before hand itself that this kernel is PV or HVM, without installing kernel? On Wed, Aug 19, 2015 at 11:27 AM, John R Pierce <pierce at hogranch.com> wrote: > On 8/18/2015 10:37 PM, Venkateswara Rao Dokku wrote: > >> Thanks for the reply. >> Sorry for the

Thanks for the reply. Sorry for the typo in the earlier mail. I have PV-HVM of CentOS 7 & I need to convert it to PV kernel. Basically here I am trying to see whether my PV_HVM kernel is vulenrable to this issue given in the following link http://seclists.org/oss-sec/2015/q3/212 In the above link, it was mentioned that the PV kernel is not vulnerable to this bug, but HVM is. It didnt say

Hi All, I am using CentOS 5.5 with gcc version 2.5.123.el5. I just wanted to check whether the CVE-2015-1781 is fixed in the current version? How can I do that? Right now I dont have access to that machine, so I wanted to check whether its fixed online ( not via shell)? Thanks for the help. -- Thanks & Regards, Venkateswara Rao Dokku.

Thanks for the reply. I did clean installation of the CentOS 7 and wanted to install the list of packages in the above mail, but couldn't get them installed. Can you please help me in installing the above packages? On Tue, Feb 10, 2015 at 11:33 AM, John R Pierce <pierce at hogranch.com> wrote: > On 2/9/2015 9:57 PM, Venkateswara Rao Dokku wrote: > >> I would like to

Hi, We are using CentOS 5.5 as a base OS for one of our products.The version of Glibc we are using was glibc-2.5-123.el5_11.1. We wanted to see whether this glibc is vulerable to CVE-2015-1781. I have gone through re-documentation & came across the following link https://access.redhat.com/security/cve/cve-2015-1781 In the link it is mentioned that, the CVE will not be fixed in Red-Hat 5

Hi, I have installed CentOS 7 HVM kernel. I would like to convert it to CentOs 7 PV kernel. When googled about it, I found that this can be done by following commands yum install xen or yum install kernel-xen But, when I tried the below commands, I am getting the error *"No package kernel-xen available.**"* What am I missing here. Any help is much appreciated. -- Thanks &

Hi, I have a customized CentOS 5.5 kernel. I want it to upgrade it to CentOS 7. The approach I have decided was to take the CentOS 7 and then install the customized packages that are there in the CentOS 5.5. While trying to install the customized packages, I could install most of the packages, but I couldn't install the below in the latest CentOS 7. 1. rhpl 2. mod_perl 3.

Many other security issues affect *unpatched* Centos 5.5 version. Some of very critical too .. -- Eero 2015-06-05 11:58 GMT+03:00 John Tall <mjtallx at gmail.com>: > On Fri, Jun 5, 2015 at 10:48 AM, Venkateswara Rao Dokku > <dvrao.584 at gmail.com> wrote: > > Thanks for the reply. > > > > Where can we get the info regarding whether its fixed in CentOS 5 or

Hi, I have php 5.4.16 php in my centos 7 machine & when I searched over internet I could see it is effected by some vulenrabilities. So I wanted to upgrade my PHP to 5.6.x, but did not find procedure for it. When I tried yum upgrade php, it says "no packages marked for update" Can you please give me some pointers so that I can continue. On Tue, Apr 28, 2015 at 2:11 AM, Johnny

HI, Is the CentOS 7 PV kernel available? I installed latest CentOS 7 & I found out that it is a HVM guest. So, if we wanted to have CentOS PV guest for CentOS 7, is there any specific steps to follow? or the same kernel will work as both PV & HVM? -- Thanks & Regards, Venkateswara Rao Dokku.

HI, I would like to upgrade my customized CentOS 5.5 to CentOS 7. For this I took the latest stable CentOS 7 image and wanted to install the packages that are there in the existing customized version of CentOS 5.5. I could install some of the packages, but the following packages I couldn't install. 1. Rhpl 2.mod_perl 3. 3.notification-daemon 4. 4.vixie-cron 5.kudzu 6.redhat-lsb

Hi, I wanted to upgrade from centOS 5.5 to CentOS 7 without losing the data. Is there any upgrade path available? or what is the proper way to do it without affecting the existing config? Thnaks for the help -- Thanks & Regards, Venkateswara Rao Dokku.

Thanks for the reply. How to know that the CentOS 7 kerenel is whether PV or HVM? When I searched about it, I found the following link, where the kernel type us determined from the 2 following commands 1. uname -r 2. lsmod | grep xen If both have "*xen*", then it is PV, if lsmod returns something but not in kernel name then its PV-HVM, else its HVM >From what

Hi, I would like to know whether the valid upgrade path will be present from CentOS 7 to future versions like we get for Ubuntu or some other operating systems. Right now, I am sure that we do not have proper update path in CentOS to move from one version to another. -- Thanks & Regards, Venkateswara Rao Dokku.

On 05/10/2016 12:19 AM, Johnny Hughes wrote: > On 05/10/2016 02:08 AM, Venkateswara Rao Dokku wrote: >> Hi, >> >> I would like to know whether the valid upgrade path will be present from >> CentOS 7 to future versions like we get for Ubuntu or some other operating >> systems. >> >> Right now, I am sure that we do not have proper update path in CentOS to