similar to: CVE-2017-5715, CVE-2017-5753 and CVE-2017-5754

I have released everything for CentOS-6 that has been released upstream in RHEL source code. I will continue to do so when they release new sources. NOTE: We will NOT be releasing anything for CentOS versions before CentOS-6 (ie, CentOS-2.1, 3.x, 4.x, 5.x releases in vault that are past EOL will not get updates) CentOS-6 and CentOS-7 will continue to get updates based on the specific version

On Jan 4, 2018, at 12:18 PM, Walter H. <walter.h at mathemainzel.info> wrote: > > will there be updates for these CVEs for CentOS 6? Red Hat hasn?t released them all yet. Quoting Christopher Robinson in the thread for this here: https://access.redhat.com/errata/RHSA-2018:0007 "We will be pushing errata out as soon as they have passed our QA team's testing. The more

How about kernel-lt and kernel-ml? Mike On 01/04/2018 05:41 PM, Warren Young wrote: > On Jan 4, 2018, at 12:18 PM, Walter H. <walter.h at mathemainzel.info> wrote: >> will there be updates for these CVEs for CentOS 6? > Red Hat hasn?t released them all yet. Quoting Christopher Robinson in the thread for this here: > > https://access.redhat.com/errata/RHSA-2018:0007

Hello Walter, On Mon, 15 May 2017 09:22:54 +0200 "Walter H." <walter.h at mathemainzel.info> wrote: > On Sun, May 14, 2017 11:00, wwp wrote: > > On Sat, 13 May 2017 13:08:17 +0200 "Walter H." > > <Walter.H at mathemainzel.info> wrote: > > > >> On 13.05.2017 00:29, Robert Moskowitz wrote: > >> > I have been working,

Hi libvorbis developers! I'm wondering if you had a chance to see my request for releasing a new libvorvis version - this is to have an official libvorbis release containing the CVE fixes that appear to be fixed in the master branch. Is there anything we can do to help with getting a release out? We're happy to work with you on this. Please let us know if we can do anything to help

Hi Ralph, Thank you for your reply! For context -- we consider reported CVEs as bugs even if it's in a third-party library we use (such as libvorbis). We first determine if the CVE is something that would impact our customer workflows. In this case because of our use of libvorbis for audio I/O, it does impact our customers so we need to resolve the CVE as soon as possible. In the

Yes, the gitlab instance is the correct upstream development repository. We maintain a mirror at github for the convenience of developers there. Cheers, Ralph On Mon, 2020-06-29 at 21:27 +0000, Ellen Johnson wrote: > Hi Ralph and libvorbis developers, > I thought the vorbis gitlab project was the main development site ( > https://gitlab.xiph.org/xiph/vorbis) because that's what

Hello Walter, On Sat, 13 May 2017 13:08:17 +0200 "Walter H." <Walter.H at mathemainzel.info> wrote: > On 13.05.2017 00:29, Robert Moskowitz wrote: > > I have been working, for the past few years, with armv7 SOCs and have > a number of servers working. > > > > Intel, etal are catching up with ARM and I have seen ones like: > > > >

Hello, in /etc/sysconfig/network-scripts/ifcfg-eth0 I have this <ifcfg-eth0> ... IPV6INIT=yes IPV6ADDR=prefix::5 IPV6ADDR_SECONDARIES="prefix::2 prefix::3 prefix::4" IPV6_AUTOCONF=no IPV6_DEFAULTGW=prefix::1 IPV6_DEFAULTDEV=eth0 </ifcfg-eth0> when I enter ifconfig the IPv6 addresses are in a different order <ifconfig> eth0 Link encap:Ethernet HWaddr ... inet addr:...

Hi, Is the command #yum list-sec cves still compatible with Centos7? Or are there alternatives to list all CVE applicable to a CentOS without the Satellite? Thanks

On Fri, Feb 15, 2019 at 4:10 PM Walter H. <Walter.H at mathemainzel.info> wrote: > > On 15.02.2019 06:29, Turritopsis Dohrnii Teo En Ming wrote: > > Hi, > > > > Could you recommend affordable and reliable cloud storage for 50 TB of data? > whats your budget? > > and 50 TB = 50 000 GB is a big amount which isn't this cheap ... Hi Walter H, My budget is

On Sep 4, 2016, at 1:27 PM, Walter H. <walter.h at mathemainzel.info> wrote: > 'ifconfig' doesn't show these additional addresses ... This is one of the many reasons why people don?t use ?ifconfig? anymore. -- Jonathan Billings <billings at negate.org>

On 16.06.2016 20:51, Warren Young wrote: > On Jun 16, 2016, at 12:41 PM, Walter H.<walter.h at mathemainzel.info> wrote: >> On 16.06.2016 19:40, Frank Cox wrote: >>> On Thu, 16 Jun 2016 19:34:09 +0200 >>> Walter H. wrote: >>> >>>> Yes, but doesn't help ... >>>> the same before ... >>>> >>>> by the way, I

Hello, how could it be achieved to run e.g. shutdown -h now from a CGI script on a system where SELinux is set to ENFORCING? Thanks Walter

Hello, in /etc/cron.d/test I've this: 50 15 * * * root ( date ; echo "---" ; env ; echo "---" ; set ) >>/tmp/test.txt and I thought I would be shown environment variables which are defined in e.g. /etc/profiles.d/proxy.sh or /etc/profiles.d/proxy.csh but this isn't like this ... where do I have to define e.g. export

On 09/04/2016 05:00 PM, Ulf Volmer wrote: >> IPADDR2=192.168.1.10 >> BROADCAST2=192.168.1.255 <-- >> NETMASK2=255.255.255.0 >> NETWORK2=192.168.1.0 <-- >> GATEWAY2=192.168.1.1 <-- >> >> in case they don't match the first IP address? > > I'm not sure at this point. If you have to add a second ip in another > different network

Hi Ralph, Again, thanks so much for doing all this! Plus thanks to all the folks who contributed to the new release! Quick clarifying question -- Isn't CVE-2018-10392 (looks like it’s fixed in https://gitlab.xiph.org/xiph/vorbis/-/issues/2335) also included in new version 1.3.7? If so can you please add it to release notes? (I asked the same question in

On 16.06.2016 19:40, Frank Cox wrote: > On Thu, 16 Jun 2016 19:34:09 +0200 > Walter H. wrote: > >> Yes, but doesn't help ... >> the same before ... >> >> by the way, I can't image that there is no mirror in Europa, >> and that the "timeout"-mirrors from US are the fastest; > yum -disableplugin=fastestmirror nowseewhathappens. > >

In another recent thread,[1] someone was having trouble with the yum-plugin-fastestmirror feature, so I suggested he remove it, since it?s just a plugin and should therefore be optional. He reported that it couldn?t be removed due to package dependencies. I investigated further and found that this also affects CentOS 5.11 and CentOS 7.2. (The OP is on CentOS 6.8.) So, I reported it as a bug

I get regularily such a mail <mail> Anacron job 'cron.daily' on .... /etc/cron.daily/logrotate: error: error running non-shared postrotate script for /var/log/clamd.clamsmtp/clamsmtpd.log of '/var/log/clamd.clamsmtp/clamsmtpd.log ' </mail> content of /etc/logrotate.d/clamsmtp /var/log/clamd.clamsmtp/clamsmtpd.log { monthly notifempty missingok