[opensuse] [Opensuse] Is this an issue in 10.0
Hey guys, I been running rkhunter for a while and every night I get an e-mail and I see this everytime and I am wondering is a real issue. * Application version scan - GnuPG 1.4.2 [ Vulnerable ] - Bind DNS 9.3.1 [ OK ] - OpenSSL 0.9.7g [ Vulnerable ] - PHP 4.4.0 [ OK ] - Procmail MTA 3.22 [ OK ] - ProFTPd 1.2.10 [ OK ] - OpenSSH 4.1p1 [ OK ] If it is, does 10.1 fix them? Can I fix them in 10.0? Thanks Chuck -- Do you know why we fall Master Wayne...so we can learn to get up. Alfred - Batman Begins --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-unsubscribe@opensuse.org For additional commands, e-mail: opensuse-help@opensuse.org
On Mon, Jul 10, 2006 at 01:40:56AM -0400, Chuck Payne wrote:
Hey guys,
I been running rkhunter for a while and every night I get an e-mail and I see this everytime and I am wondering is a real issue.
* Application version scan - GnuPG 1.4.2 [ Vulnerable ] - Bind DNS 9.3.1 [ OK ] - OpenSSL 0.9.7g [ Vulnerable ] - PHP 4.4.0 [ OK ] - Procmail MTA 3.22 [ OK ] - ProFTPd 1.2.10 [ OK ] - OpenSSH 4.1p1 [ OK ]
If it is, does 10.1 fix them? Can I fix them in 10.0?
If rkhunter just checks the versions, it is wrong in doing so. We backport and release security fixes for affected packages. Ciao, Marcus --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-unsubscribe@opensuse.org For additional commands, e-mail: opensuse-help@opensuse.org
On Mon, 10 Jul 2006 08:37:14 +0200, Marcus Meissner wrote:
If rkhunter just checks the versions, it is wrong in doing so.
rkhunter does only do version checks, so it's use on *any* distribution that issues security fixes for existing package versions is limited to packages not provided by the distribution. For all other packages it's reports should just be ignored. Philipp --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-unsubscribe@opensuse.org For additional commands, e-mail: opensuse-help@opensuse.org
participants (3)
-
Chuck Payne -
Marcus Meissner -
Philipp Thomas