Ok I got the following message from rkHunter and need some advice please:
Application advisories
* Application version scan
- GnuPG 1.2.1 [ Old or patched version ]
- Apache 2.0.46 [ Old or patched version ]
- Bind DNS 9.2.4 [ Unknown ]
- OpenSSL 0.9.7a [ Old or patched version ]
- ProFTPd 1.2.9 [ Old or patched version ]
RPM -qa Shows:
gnupg-(none)-1.2.1-10
openssl-(none)-0.9.7a-33.15
psa-proftpd-xinetd-(none)-1.2.9-rhel3.build71050228.12
psa-proftpd-(none)-1.2.9-rhel3.build71050228.12
I'm not finding Bind DNS using the rpm query or Apache.
So, could use some guidance please.
Thanks.
RkHunter and applications?
-
- Forum Regular
- Posts: 471
- Joined: Mon Dec 06, 2004 10:43 pm
-
- Forum Regular
- Posts: 471
- Joined: Mon Dec 06, 2004 10:43 pm
-
- Forum Regular
- Posts: 471
- Joined: Mon Dec 06, 2004 10:43 pm
Ok here is my bind list:
[root@gz root]# rpm -qa |grep bind
redhat-config-bind-(none)-2.0.0-14.2
bind-20-9.2.4-5_EL3
bind-libs-20-9.2.4-5_EL3
bind-libs-10-9.2.4-EL3_10
bind-10-9.2.4-EL3_10
ypbind-3-1.12-5
bind-utils-20-9.2.4-5_EL3
ypbind-3-1.12-5.21.1
redhat-config-bind-(none)-2.0.0-14.2.centos.0
bind-utils-10-9.2.4-EL3_10
So, with RK hunter flagging these programs what do I need to fix to ensure that they are secure? when I yum update "program" I get there are no updates for it, so should I assume I'm ok?
I'm pretty much running only art's channels for yum.
Thanks. This is helping educate me.
[root@gz root]# rpm -qa |grep bind
redhat-config-bind-(none)-2.0.0-14.2
bind-20-9.2.4-5_EL3
bind-libs-20-9.2.4-5_EL3
bind-libs-10-9.2.4-EL3_10
bind-10-9.2.4-EL3_10
ypbind-3-1.12-5
bind-utils-20-9.2.4-5_EL3
ypbind-3-1.12-5.21.1
redhat-config-bind-(none)-2.0.0-14.2.centos.0
bind-utils-10-9.2.4-EL3_10
So, with RK hunter flagging these programs what do I need to fix to ensure that they are secure? when I yum update "program" I get there are no updates for it, so should I assume I'm ok?
I'm pretty much running only art's channels for yum.
Thanks. This is helping educate me.
-
- Forum Regular
- Posts: 471
- Joined: Mon Dec 06, 2004 10:43 pm