similar to: Glibc vulnerbality CVE-2015-1781

Thanks for the reply. Where can we get the info regarding whether its fixed in CentOS 5 or not? I did rpm -q --changelog <glibc> | grep <CVE> but I dont find any info on this. This might means 3 things. 1. The version is not affected so no fix 2. The version is affected, still no fix 3. Fix applied, but not shown in o/p Thanks On Fri, Jun 5, 2015 at 2:06 PM, John Tall <mjtallx

Hi All, I am using CentOS 5.5 with gcc version 2.5.123.el5. I just wanted to check whether the CVE-2015-1781 is fixed in the current version? How can I do that? Right now I dont have access to that machine, so I wanted to check whether its fixed online ( not via shell)? Thanks for the help. -- Thanks & Regards, Venkateswara Rao Dokku.

On Wed, 25 Nov 2015 09:51:58 +0530 Venkateswara Rao Dokku wrote: > In the link it is mentioned that, the CVE will not be fixed in Red-Hat 5 > version. What does that mean? I mean, whether the RedHat 5 is vulnerable & > fix is not available or RedHat 5 is not vulnerable, hence the fix is not > given? Read what it says a little higher on that webpage, under the Statement heading:

Many other security issues affect *unpatched* Centos 5.5 version. Some of very critical too .. -- Eero 2015-06-05 11:58 GMT+03:00 John Tall <mjtallx at gmail.com>: > On Fri, Jun 5, 2015 at 10:48 AM, Venkateswara Rao Dokku > <dvrao.584 at gmail.com> wrote: > > Thanks for the reply. > > > > Where can we get the info regarding whether its fixed in CentOS 5 or

On Fri, Jun 5, 2015 at 10:26 AM, Venkateswara Rao Dokku <dvrao.584 at gmail.com> wrote: > Hi All, > > I am using CentOS 5.5 with gcc version 2.5.123.el5. Are you really on 5.5? You should consider updating to 5.11. > I just wanted to check whether the CVE-2015-1781 is fixed in the current > version? > > How can I do that? > > > Right now I dont have access to

just for my curiosity, How can we make sure that its not affected? Is there any script to check whether its vulnerable or not (as in bash shell shock vulnerability test)? On Tue, Mar 31, 2015 at 12:25 PM, Eero Volotinen <eero.volotinen at iki.fi> wrote: > Centos 5 is not affected by this bug, so fix is not available. > > Eero > 31.3.2015 9.48 ap. kirjoitti "Venkateswara

Thanks for the reply. If we want to have PV kernel for CentOs 7 , are there any guidelines to follow? How we can know before hand itself that this kernel is PV or HVM, without installing kernel? On Wed, Aug 19, 2015 at 11:27 AM, John R Pierce <pierce at hogranch.com> wrote: > On 8/18/2015 10:37 PM, Venkateswara Rao Dokku wrote: > >> Thanks for the reply. >> Sorry for the

Hi All, I wanted to fix the openssl vulnerabilities (CVE-2014-3569, CVE-2014-3570, CVE-2014-3571, CVE-2014-3572) in my CentOS 5.5 and found out that 0.9.8zd has the fixes I am looking for (from the https://www.openssl.org/news/vulnerabilities.html link). But, When I tried to find the openssl-0.9.8zd rpm package, I did not find it in http://mirror.centos.org/centos/5/updates/x86_64/RPMS/. The

Thanks for the replies. The tool that we used for testing the security vulnerability is "Nessus". I have glibc version 2.17-78.el7, I saw that CVE-2015-0235 (Ghost) is fixed in this version and I want to apply patch for the vulnerbailities CVE-2015-1472 & CVE-2015-1473. Can you please help me in finding the right version that has fixes for these? Thanks On Sat, Apr 25, 2015 at

Thanks for the reply. I did clean installation of the CentOS 7 and wanted to install the list of packages in the above mail, but couldn't get them installed. Can you please help me in installing the above packages? On Tue, Feb 10, 2015 at 11:33 AM, John R Pierce <pierce at hogranch.com> wrote: > On 2/9/2015 9:57 PM, Venkateswara Rao Dokku wrote: > >> I would like to

Hi, I was using CentOS 7 and when I ran some custom commercial security scan on my machine, I found about 122 vulnerabilities. Can you help me on how to get security upgrades on top of my existing CentOS? # cat /etc/redhat-release CentOS Linux release 7.1.1503 (Core) Thanks for the help. -- Thanks & Regards, Venkateswara Rao Dokku.

Hi, I have a customized CentOS 5.5 kernel. I want it to upgrade it to CentOS 7. The approach I have decided was to take the CentOS 7 and then install the customized packages that are there in the CentOS 5.5. While trying to install the customized packages, I could install most of the packages, but I couldn't install the below in the latest CentOS 7. 1. rhpl 2. mod_perl 3.

On Fri, Jun 5, 2015 at 10:48 AM, Venkateswara Rao Dokku <dvrao.584 at gmail.com> wrote: > Thanks for the reply. > > Where can we get the info regarding whether its fixed in CentOS 5 or not? > > I did rpm -q --changelog <glibc> | grep <CVE> > > but I dont find any info on this. > > This might means 3 things. > 1. The version is not affected so no fix

On 4/24/2015 12:14 PM, Alexander Dalloz wrote: > Am 24.04.2015 um 11:21 schrieb Venkateswara Rao Dokku: >> I was using CentOS 7 and when I ran some custom commercial security >> scan on >> my machine, I found about 122 vulnerabilities. > > That's why those scans are wasted money. From a security management > point of view they neither help you nor your manager.

Hi, I have installed CentOS 7 HVM kernel. I would like to convert it to CentOs 7 PV kernel. When googled about it, I found that this can be done by following commands yum install xen or yum install kernel-xen But, when I tried the below commands, I am getting the error *"No package kernel-xen available.**"* What am I missing here. Any help is much appreciated. -- Thanks &

HI, Is the CentOS 7 PV kernel available? I installed latest CentOS 7 & I found out that it is a HVM guest. So, if we wanted to have CentOS PV guest for CentOS 7, is there any specific steps to follow? or the same kernel will work as both PV & HVM? -- Thanks & Regards, Venkateswara Rao Dokku.

HI, I would like to upgrade my customized CentOS 5.5 to CentOS 7. For this I took the latest stable CentOS 7 image and wanted to install the packages that are there in the existing customized version of CentOS 5.5. I could install some of the packages, but the following packages I couldn't install. 1. Rhpl 2.mod_perl 3. 3.notification-daemon 4. 4.vixie-cron 5.kudzu 6.redhat-lsb

Hi, I wanted to upgrade from centOS 5.5 to CentOS 7 without losing the data. Is there any upgrade path available? or what is the proper way to do it without affecting the existing config? Thnaks for the help -- Thanks & Regards, Venkateswara Rao Dokku.

Thanks for the reply. Sorry for the typo in the earlier mail. I have PV-HVM of CentOS 7 & I need to convert it to PV kernel. Basically here I am trying to see whether my PV_HVM kernel is vulenrable to this issue given in the following link http://seclists.org/oss-sec/2015/q3/212 In the above link, it was mentioned that the PV kernel is not vulnerable to this bug, but HVM is. It didnt say

Thanks for the reply. How to know that the CentOS 7 kerenel is whether PV or HVM? When I searched about it, I found the following link, where the kernel type us determined from the 2 following commands 1. uname -r 2. lsmod | grep xen If both have "*xen*", then it is PV, if lsmod returns something but not in kernel name then its PV-HVM, else its HVM >From what