openSUSE Security October 2009

security@lists.opensuse.org

9 participants
5 discussions

by Sascha 'saigkill' Manns

Hello Mates, short Question: AFAIS we haven't an Package for Nessus. Is that right, or not? -- Sincerely yours Sascha Manns openSUSE Member openSUSE Ambassador openSUSE Marketing Team openSUSE Build Service Web: http://saschamanns.gulli.to Blog: http://saigkill.wordpress.com ClaimID: http://claimid.com/saigkill -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

12 years, 9 months

[opensuse-security] Minimum time intervall for log-in re-tries

by Wolfgang Kluge

Good morning. I hope someone could help me in this: I receive remote login attempts in 1 second intervals from the same IP address to our port 22. Port 22 is forwarded by the firewall ( Sifoworks ). OS is openSUSE 11.0 Is there a way to increase the time between a failed login attempt and the next possible login re-try ? Regards Wolfgang Kluge -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

12 years, 9 months

Re: [opensuse-security] Minimum time intervall for log-in re-tries

by Josh More

You can also run DenyHosts ( http://denyhosts.sourceforge.net/ ) to block connections based on failed logins. -Josh More, RHCE, CISSP, NCLP, GIAC morej(a)alliancetechnologies.net 515-245-7701 >>> Ralf Ronneburger <ralf(a)ronneburger.de> 10/19/09 4:23 AM >>> Hi Wolfgang, SuSEfirewall2 (config file /etc/sysconfig/SuSEfirewall2) already has an option for this: FW_SERVICES_ACCEPT_EXT="0.0.0.0/0,tcp,22,,hitcount=3,blockseconds=60,recentname=ssh" This blocks requests for 60 seconds after the third attempt. Greetings, Ralf Wolfgang Kluge schrieb: > Good morning. > I hope someone could help me in this: > > I receive remote login attempts in 1 second intervals from the same IP > address to our port 22. > Port 22 is forwarded by the firewall ( Sifoworks ). > OS is openSUSE 11.0 > > Is there a way to increase the time between a failed login attempt and > the next possible login re-try ? > > Regards > Wolfgang Kluge > > > > > > -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

12 years, 9 months

[opensuse-security] Fast OnlineUpdate for SuSE (fou4s) 0.15.1 available

by Markus Gaugusch

I'm happy to announce a new version of fou4s (Fast OnlineUpdate for SuSE). Changelog: * Bugfixes for SLES10 * Fix reboot notification for kernel updates * Huge performance improvement on subsequent calls on 11.x * Fix kernel version detection fault in certain cases General information: Fou4s is a commandline tool, usually run via crontab every night. It checks for and downloads updates and sends an email report to the administrator. best regards, Markus Gaugusch -- __________________ /"\ Markus Gaugusch \ / ASCII Ribbon Campaign markus(at)gaugusch.at X Against HTML Mail / \ -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

12 years, 9 months

Re: [opensuse-security] Signature verification failed for file 'repomd.xml' from repository 'openSUSE-11.1-Update'

by Thomas R. Jones

Data corruption failure during transfer? Works on my system. thomas@bodhisattva:~/Desktop> sudo zypper refresh root's password: Repository 'openSUSE BuildService - GNOME:Community' is up to date. Repository 'openSUSE-11.1-Non-Oss' is up to date. Repository 'openSUSE-11.1-Oss' is up to date. Retrieving repository 'openSUSE-11.1-Update' metadata [done] Building repository 'openSUSE-11.1-Update' cache [done] Retrieving repository 'Packman Repository' metadata [done] Building repository 'Packman Repository' cache [done] Repository 'VideoLan Repository' is up to date. Repository 'thomasrjones' is up to date. All repositories have been refreshed. thomas@bodhisattva:~/Desktop> On Wed, 2009-04-01 at 17:41 +0200, Michael Ströder wrote: > HI! > > What's up with this? > > -------------------- snip -------------------- > # zypper refresh > Repository 'openSUSE-11.1-Non-Oss' is up to date. > Signature verification failed for file 'repomd.xml' from repository > 'openSUSE-11.1-Update'. > Warning: This might be caused by a malicious change in the file! > Continuing might be risky. Continue anyway? [yes/NO]: > -------------------- snip -------------------- > > Ciao, Michael. -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

12 years, 10 months

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

1996

openSUSE Security October 2009