openSUSE Security

Download

security@lists.opensuse.org

November 2015

5 participants
2 discussions

[opensuse-security] openSUSE 13.1 and weakdh.org
by Tobias Hennerich 15 Dec '15

15 Dec '15

Hi, we have several webservers using apache and openSUSE 13.1. https://www.ssllabs.com/ssltest/ rates these systems with an overall rating "B", because "/This server supports weak Diffie-Hellman (DH) key exchange parameters./". The recommendations on https://weakdh.org/sysadmin.html can not be used because the apache directive SSLOpenSSLConfCmd needs apache 2.4.8 and openSUSE 13.1 is using 2.4.6. The other suggestion to append the DHparams to the end of the certificate file does also not work, because you need apache 2.4.7 for that. I found ticket https://bugzilla.suse.com/show_bug.cgi?id=931723 from May 2015 in Status "NEW". There is a comment from "/Swamp Workflow Management ////2015-10-06 07:09:35 UTC/", that there should be a fix for openSUSE 13.1 with apache2-2.4.6-6.50.1, but a "rpm -q --changelog apache2" does not mention this problem and the various patches of the src-rpm do not match, too. / /Any suggestions? Best regards Tobias -- T+T Hennerich GmbH / Zettachring 12a / 70567 Stuttgart Fon:+49(711)720714-0 Fax:+49(711)720714-44 Vanity:+49(700)HENNERICH Geschäftsführer: Dipl. Inf. Tobias Hennerich + Dipl. Inf. Timo Hennerich http://www.hennerich.de/ Amtsgericht Stuttgart, HRB 281482 -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-security+owner(a)opensuse.org

3 7

[opensuse-security] Re: openSUSE-RU-2015:2060-1: moderate: Recommended update for clamav-database
by Christian Boltz 22 Nov '15

22 Nov '15

Hello, Am Freitag, 20. November 2015 schrieben Sie: > openSUSE Recommended Update: Recommended update for clamav-database > This is the weekly internal clamav database refresh on November > 16th. Does shipping weekly updates of the virus signatures really make sense? They are probably already outdated when the update is released, especially when it comes to catching new viruses/malware/etc. Wouldn't it be better to setup an (at least) daily cronjob that runs freshclam? Regards, Christian Boltz -- You could just randomly throw darts at the list of packages on the DVD and not on the CD and any of them can be removed with little or no end-user visibility. [Greg Freemyer in opensuse-factory] -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-security+owner(a)opensuse.org

3 3