Monitoring Décembre 2015

monitoring@federez.net

6 participants
38 discussions

1 Debian package update(s) for quigon.federez.net

par root＠quigon.rez-gif.supelec.fr

apticron report [Wed, 23 Dec 2015 23:38:13 +0100] ======================================================================== apticron has detected that some packages need upgrading on: quigon.federez.net [ 160.228.155.65 ] The following packages are currently pending an upgrade: libxml2 2.9.1+dfsg1-5+deb8u1 ======================================================================== Package Details: Lecture des fichiers de modifications (« changelog »)... --- Modifications pour libxml2 --- libxml2 (2.9.1+dfsg1-5+deb8u1) jessie-security; urgency=high * Non-maintainer upload by the Security Team. * Add patches to address CVE-2015-7941. CVE-2015-7941: Denial of service via out-of-bounds read. (Closes: #783010) * Add 0058-CVE-2015-1819-Enforce-the-reader-to-run-in-constant-.patch. CVE-2015-1819: Enforce the reader to run in constant memory. (Closes: #782782) * Add patches to address CVE-2015-8317. CVE-2015-8317: Out-of-bounds heap read when parsing file with unfinished xml declaration. * Add patches to address CVE-2015-7942. CVE-2015-7942: heap-based buffer overflow in xmlParseConditionalSections(). (Closes: #802827) * Add 0063-Fix-parsing-short-unclosed-comment-uninitialized-acc.patch patch. Parsing an unclosed comment can result in `Conditional jump or move depends on uninitialised value(s)` and unsafe memory access. (Closes: #782985) * Add 0064-CVE-2015-8035-Fix-XZ-compression-support-loop.patch patch. CVE-2015-8035: DoS when parsing specially crafted XML document if XZ support is enabled. (Closes: #803942) * Add 0065-Avoid-extra-processing-of-MarkupDecl-when-EOF.patch patch. CVE-2015-8241: Buffer overread with XML parser in xmlNextChar. (Closes: #806384) * Add 0066-Avoid-processing-entities-after-encoding-conversion-.patch patch. CVE-2015-7498: Heap-based buffer overflow in xmlParseXmlDecl. * Add 0067-CVE-2015-7497-Avoid-an-heap-buffer-overflow-in-xmlDi.patch patch. CVE-2015-7497: Heap-based buffer overflow in xmlDictComputeFastQKey. * Add 0068-CVE-2015-5312-Another-entity-expansion-issue.patch patch. CVE-2015-5312: CPU exhaustion when processing specially crafted XML input. * Add patches to address CVE-2015-7499. CVE-2015-7499: Heap-based buffer overflow in xmlGROW. * Add 0071-CVE-2015-7500-Fix-memory-access-error-due-to-incorre.patch patch. CVE-2015-7500: Heap buffer overflow in xmlParseMisc. -- Salvatore Bonaccorso <carnil(a)debian.org> Sat, 19 Dec 2015 15:29:45 +0100 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on quigon.federez.net -- apticron

9 années, 4 mois

2 Debian package update(s) for baldrick.crans.org

par root＠baldrick.crans.org

apticron report [Wed, 23 Dec 2015 20:44:09 +0100] ======================================================================== apticron has detected that some packages need upgrading on: baldrick.crans.org [ 138.231.142.239 2a01:240:fe3d:4:62:61ff:fe6c:6401 138.231.142.239 ] [ 2a01:240:fe3d:4:62:61ff:fe6c:6401 ] The following packages are currently pending an upgrade: libxml2 2.9.1+dfsg1-5+deb8u1 libxml2-dev 2.9.1+dfsg1-5+deb8u1 ======================================================================== Package Details: Lecture des fichiers de modifications (« changelog »)... --- Modifications pour libxml2 (libxml2 libxml2-dev) --- libxml2 (2.9.1+dfsg1-5+deb8u1) jessie-security; urgency=high * Non-maintainer upload by the Security Team. * Add patches to address CVE-2015-7941. CVE-2015-7941: Denial of service via out-of-bounds read. (Closes: #783010) * Add 0058-CVE-2015-1819-Enforce-the-reader-to-run-in-constant-.patch. CVE-2015-1819: Enforce the reader to run in constant memory. (Closes: #782782) * Add patches to address CVE-2015-8317. CVE-2015-8317: Out-of-bounds heap read when parsing file with unfinished xml declaration. * Add patches to address CVE-2015-7942. CVE-2015-7942: heap-based buffer overflow in xmlParseConditionalSections(). (Closes: #802827) * Add 0063-Fix-parsing-short-unclosed-comment-uninitialized-acc.patch patch. Parsing an unclosed comment can result in `Conditional jump or move depends on uninitialised value(s)` and unsafe memory access. (Closes: #782985) * Add 0064-CVE-2015-8035-Fix-XZ-compression-support-loop.patch patch. CVE-2015-8035: DoS when parsing specially crafted XML document if XZ support is enabled. (Closes: #803942) * Add 0065-Avoid-extra-processing-of-MarkupDecl-when-EOF.patch patch. CVE-2015-8241: Buffer overread with XML parser in xmlNextChar. (Closes: #806384) * Add 0066-Avoid-processing-entities-after-encoding-conversion-.patch patch. CVE-2015-7498: Heap-based buffer overflow in xmlParseXmlDecl. * Add 0067-CVE-2015-7497-Avoid-an-heap-buffer-overflow-in-xmlDi.patch patch. CVE-2015-7497: Heap-based buffer overflow in xmlDictComputeFastQKey. * Add 0068-CVE-2015-5312-Another-entity-expansion-issue.patch patch. CVE-2015-5312: CPU exhaustion when processing specially crafted XML input. * Add patches to address CVE-2015-7499. CVE-2015-7499: Heap-based buffer overflow in xmlGROW. * Add 0071-CVE-2015-7500-Fix-memory-access-error-due-to-incorre.patch patch. CVE-2015-7500: Heap buffer overflow in xmlParseMisc. -- Salvatore Bonaccorso <carnil(a)debian.org> Sat, 19 Dec 2015 15:29:45 +0100 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on baldrick.crans.org -- apticron

9 années, 4 mois

Cron <root@quigon> test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )

par root＠quigon.rez-gif.supelec.fr

/etc/cron.daily/duplicity-backup: BackendException: Giving up trying to upload 'duplicity-full.20151222T055157Z.vol336.difftar.gpg' after 5 attempts

9 années, 4 mois

*** SECURITY information for baldrick.crans.org ***

par dstan＠baldrick.crans.org

baldrick.crans.org : Dec 21 14:31:41 : dstan : user NOT in sudoers ; TTY=pts/3 ; PWD=/home/dstan ; USER=root ; COMMAND=/usr/bin/less /var/log/syslog

9 années, 4 mois

*** SECURITY information for baldrick.crans.org ***

par dstan＠baldrick.crans.org

baldrick.crans.org : Dec 21 14:31:35 : dstan : user NOT in sudoers ; TTY=pts/3 ; PWD=/home/dstan ; USER=root ; COMMAND=/usr/bin/less /var/log/syslog

9 années, 4 mois

*** SECURITY information for baldrick.crans.org ***

par dstan＠baldrick.crans.org

baldrick.crans.org : Dec 21 14:29:09 : dstan : user NOT in sudoers ; TTY=pts/3 ; PWD=/home/dstan ; USER=root ; COMMAND=/usr/bin/less /var/log/syslog

9 années, 4 mois

monit alert -- Exists freeradius

par monit＠baldrick.crans.org

Exists Service freeradius Date: Mon, 21 Dec 2015 13:57:14 Action: alert Host: baldrick.crans.org Description: process is running with pid 3306 Monit, unique employÃ© de federez,

9 années, 4 mois

monit alert -- Execution succeeded freeradius

par monit＠baldrick.crans.org

Execution succeeded Service freeradius Date: Mon, 21 Dec 2015 13:56:14 Action: alert Host: baldrick.crans.org Description: started Monit, unique employÃ© de federez,

9 années, 4 mois

monit alert -- Execution failed freeradius

par monit＠baldrick.crans.org

Execution failed Service freeradius Date: Mon, 21 Dec 2015 13:55:14 Action: alert Host: baldrick.crans.org Description: failed to start (exit status 1) -- /etc/init.d/freeradius: Starting FreeRADIUS daemon: freeradius failed! Monit, unique employÃ© de federez,

9 années, 4 mois

monit alert -- Does not exist freeradius

par monit＠baldrick.crans.org

Does not exist Service freeradius Date: Mon, 21 Dec 2015 13:54:43 Action: restart Host: baldrick.crans.org Description: process is not running Monit, unique employÃ© de federez,

9 années, 4 mois

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

Monitoring Décembre 2015