[BlueOnyx:15171] Re: unable to YUM

[Michael Stauber]

Meaulnes, 

If 'rpm -q -changelog openssl' on a fully yummed box doesn't mention that CVE, then it might be a 5106R, whose OpenSSL is not affected anyway. 

Run a 'rpm -q openssl' and report back the exact version.

I worked on your VPS's to resolve that other issue we talked about and made sure that OpenSSL is also fully updated.

As for the /var/cache/yum/... stuff: that only applies in the particular fault state that was reported by Adam. Like vhen the yum update buggers out at that point. The yum cache is usually cleared after sucessful updates. 


--
Best regards,

Michael Stauber

<div>-------- Ursprüngliche Nachricht --------</div><div>Von: "Meaulnes Legler @ MailList" <bluelist at waveweb.ch> </div><div>Datum:10.04.2014  23:57  (GMT-05:00) </div><div>An: blueonyx at mail.blueonyx.it </div><div>Betreff: [BlueOnyx:15170] Re: unable to YUM </div><div>
</div>hello
I'm new to this list; I just read Adam's & Michael's discussion and compared the OpenSSL version with the one on my server.

`openssl version -a` produces the same output as Adam's one, except the platform is «linux-x86_64». So probably I have another machine... But:

> Do a "rpm -q --changelog openssl|more" to take a look at the changelog
> of the RPM. You'll see that it contains the fix against CVE-2014-0160.

does *not* show the CVE-2014-0160 fix. And:

> ls -la /var/cache/yum/i386/6.*/Solarspeed.net-AVSPAM-v51/packages/*.rpm

doesn'tshow *any* .rpm in the four (old?) directories

# ls -l /var/cache/yum/x86_64/
total 16
drwxr-xr-x 9 root root 4096 Jan 20  2012 6.1
drwxr-xr-x 8 root root 4096 Feb 18  2012 6.2
drwxr-xr-x 8 root root 4096 Aug 17  2012 6.3
drwxr-xr-x 8 root root 4096 Apr  1  2013 6.4

So does yum make any updates and is my OpenSSL version accurate?

Thank you and best regards

Meaulnes Legler
~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
~ http://www.WaveWeb.ch ~
~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
~  Zurich, Switzerland  ~
~  +41\0 44 260 16 60   ~
~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~



_______________________________________________
Blueonyx mailing list
Blueonyx at mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.blueonyx.it/pipermail/blueonyx/attachments/20140411/7e908928/attachment.html>