Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Date: Tue, 25 Sep 2012 08:50:06 -0500 Reply-To: Pat RieheckySender: Security Errata for Scientific Linux From: Pat Riehecky Organization: Fermilab Subject: FASTBUGS for SL 5x i386, x86_64 now available MIME-Version: 1.0 The following FASTBUGS have been uploaded to i386: perl-LDAP-0.33-4.el5_8.noarch.rpm x86_64: perl-LDAP-0.33-4.el5_8.noarch.rpm Date: Tue, 25 Sep 2012 08:50:08 -0500 Reply-To: Pat Riehecky Sender: Security Errata for Scientific Linux From: Pat Riehecky Organization: Fermilab Subject: FASTBUGS for SL 6x i386, x86_64 now available MIME-Version: 1.0 The following FASTBUGS have been uploaded to i386: cvs-1.11.23-15.el6.i686.rpm cvs-inetd-1.11.23-15.el6.noarch.rpm graphviz-2.26.0-10.el6.i686.rpm graphviz-devel-2.26.0-10.el6.i686.rpm graphviz-doc-2.26.0-10.el6.i686.rpm graphviz-gd-2.26.0-10.el6.i686.rpm graphviz-graphs-2.26.0-10.el6.i686.rpm graphviz-guile-2.26.0-10.el6.i686.rpm graphviz-java-2.26.0-10.el6.i686.rpm graphviz-lua-2.26.0-10.el6.i686.rpm graphviz-perl-2.26.0-10.el6.i686.rpm graphviz-php-2.26.0-10.el6.i686.rpm graphviz-python-2.26.0-10.el6.i686.rpm graphviz-ruby-2.26.0-10.el6.i686.rpm graphviz-tcl-2.26.0-10.el6.i686.rpm krb5-devel-1.9-33.el6_3.3.i686.rpm krb5-libs-1.9-33.el6_3.3.i686.rpm krb5-pkinit-openssl-1.9-33.el6_3.3.i686.rpm krb5-server-1.9-33.el6_3.3.i686.rpm krb5-server-ldap-1.9-33.el6_3.3.i686.rpm krb5-workstation-1.9-33.el6_3.3.i686.rpm openswan-2.6.32-19.el6_3.i686.rpm openswan-doc-2.6.32-19.el6_3.i686.rpm squid-3.1.10-9.el6_3.i686.rpm x86_64: cvs-1.11.23-15.el6.x86_64.rpm cvs-inetd-1.11.23-15.el6.noarch.rpm graphviz-2.26.0-10.el6.i686.rpm graphviz-2.26.0-10.el6.x86_64.rpm graphviz-devel-2.26.0-10.el6.i686.rpm graphviz-devel-2.26.0-10.el6.x86_64.rpm graphviz-doc-2.26.0-10.el6.x86_64.rpm graphviz-gd-2.26.0-10.el6.i686.rpm graphviz-gd-2.26.0-10.el6.x86_64.rpm graphviz-graphs-2.26.0-10.el6.x86_64.rpm graphviz-guile-2.26.0-10.el6.x86_64.rpm graphviz-java-2.26.0-10.el6.x86_64.rpm graphviz-lua-2.26.0-10.el6.x86_64.rpm graphviz-perl-2.26.0-10.el6.x86_64.rpm graphviz-php-2.26.0-10.el6.x86_64.rpm graphviz-python-2.26.0-10.el6.x86_64.rpm graphviz-ruby-2.26.0-10.el6.x86_64.rpm graphviz-tcl-2.26.0-10.el6.x86_64.rpm krb5-devel-1.9-33.el6_3.3.i686.rpm krb5-devel-1.9-33.el6_3.3.x86_64.rpm krb5-libs-1.9-33.el6_3.3.i686.rpm krb5-libs-1.9-33.el6_3.3.x86_64.rpm krb5-pkinit-openssl-1.9-33.el6_3.3.x86_64.rpm krb5-server-1.9-33.el6_3.3.x86_64.rpm krb5-server-ldap-1.9-33.el6_3.3.i686.rpm krb5-server-ldap-1.9-33.el6_3.3.x86_64.rpm krb5-workstation-1.9-33.el6_3.3.x86_64.rpm openswan-2.6.32-19.el6_3.x86_64.rpm openswan-doc-2.6.32-19.el6_3.x86_64.rpm squid-3.1.10-9.el6_3.x86_64.rpm Date: Tue, 25 Sep 2012 11:42:51 -0500 Reply-To: Pat Riehecky Sender: Security Errata for Scientific Linux From: Pat Riehecky Organization: Fermilab Subject: Security ERRATA Low: yum-autoupdate update on SL5.x, SL6.x i386/x86_64 MIME-Version: 1.0 Synopsis: Low: yum-autoupdate update Issue date: 2012-09-25 The Scientific Linux team was made aware of a problem with the use of temp files in the yum-autoupdate script by Elias Persson. The problem should be corrected in these packages. These packages also include some minor feature updates for each release. For SL5, the script now includes the 'PRERUN' and 'POSTRUN' functionality first provided in SL5.8 and SL6. The script is still configured as before, in the /etc/yum.d/ directory. The new features were added to the /etc/yum.d/yum.cron.updateexec config file. For SL6, the package now includes an augeas lense for possible automated configuration. Augeas is a configuration file editing tool. This lense allows augeas to read your configuration file so that you can customize it through that program. Typically augeas is used for automated configuration file edits. This lense should allow you to script out any changes you wish to make at your site. Automated tools such as puppet can use augeas as native tool for configuration file edits. These packages were placed in testing for two weeks before their release. There were no reported problems. SL5: i386: yum-autoupdate-1.2-2.SL.noarch.rpm x86_64: yum-autoupdate-1.2-2.SL.noarch.rpm SL6: i386: yum-autoupdate-2-5.0.noarch.rpm x86_64: yum-autoupdate-2-5.0.noarch.rpm