Monitoring Janvier 2016

monitoring@federez.net

6 participants
35 discussions

par monit＠baldrick.crans.org

Does not exist Service fail2ban Date: Wed, 06 Jan 2016 13:22:32 Action: restart Host: baldrick.crans.org Description: process is not running Monit, unique employÃ© de federez,

10 années, 2 mois

4 Debian package update(s) for hexagon.federez.net

par root＠hexagon.federez.net

apticron report [Wed, 06 Jan 2016 09:48:18 +0100] ======================================================================== apticron has detected that some packages need upgrading on: hexagon.federez.net [ 5.39.82.35 2001:41d0:8:9423::1 5.39.82.35 2001:41d0:8:9423::1 ] The following packages are currently pending an upgrade: git 1:2.1.4-2.1+deb8u1 git-man 1:2.1.4-2.1+deb8u1 linux-image-3.16.0-4-amd64 3.16.7-ckt20-1+deb8u2 linux-libc-dev 3.16.7-ckt20-1+deb8u2 ======================================================================== Package Details: Lecture des fichiers de modifications (« changelog »)... --- Modifications pour git (git git-man) --- git (1:2.1.4-2.1+deb8u1) jessie-security; urgency=high * Non-maintainer upload by the Security Team. * Fix CVE-2015-7545, arbitrary code execution issues via URLs with: - 01-CVE-2015-7545-1.patch: add a protocol-whitelist environment variable - 02-CVE-2015-7545-2.patch: allow only certain protocols for submodule fetches - 03-CVE-2015-7545-3.patch: refactor protocol whitelist code - 04-CVE-2015-7545-4.patch: limit redirection to protocol-whitelist - 05-CVE-2015-7545-5.patch: limit redirection depth * Make new tests executable. -- Laszlo Boszormenyi (GCS) <gcs(a)debian.org> Wed, 16 Dec 2015 08:24:37 +0000 --- Modifications pour linux (linux-image-3.16.0-4-amd64 linux-libc-dev) --- linux (3.16.7-ckt20-1+deb8u2) jessie-security; urgency=medium * [xen] Fix race conditions in back-end drivers (CVE-2015-8550, XSA-155) * [xen] pciback: Fix state validation in MSI control operations (CVE-2015-8551, CVE-2015-8852, XSA-157) * pptp: verify sockaddr_len in pptp_bind() and pptp_connect() (CVE-2015-8569) * bluetooth: Validate socket address length in sco_sock_bind() (CVE-2015-8575) * ptrace: being capable wrt a process requires mapped uids/gids (CVE-2015-8709) * KEYS: Fix race between read and revoke (CVE-2015-7550) * [x86] KVM: Reload pit counters for all channels when restoring state (CVE-2015-7513) * udp: properly support MSG_PEEK with truncated buffers (Closes: #808293, regression in 3.16.7-ckt17) * Revert "xhci: don't finish a TD if we get a short transfer event mid TD" (Closes: #808602, #808953, regression in 3.16.7-ckt20) -- Ben Hutchings <ben(a)decadent.org.uk> Sat, 02 Jan 2016 03:31:39 +0000 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on hexagon.federez.net -- apticron

10 années, 2 mois

Cron <root@quigon> test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )

par root＠quigon.rez-gif.supelec.fr

/etc/cron.daily/duplicity-backup: BackendException: Giving up trying to upload 'duplicity-full.20160106T053700Z.vol332.difftar.gpg' after 5 attempts

10 années, 2 mois

5 Debian package update(s) for quigon.federez.net

par root＠quigon.rez-gif.supelec.fr

apticron report [Tue, 05 Jan 2016 23:38:13 +0100] ======================================================================== apticron has detected that some packages need upgrading on: quigon.federez.net [ 160.228.155.65 ] The following packages are currently pending an upgrade: git 1:2.1.4-2.1+deb8u1 git-man 1:2.1.4-2.1+deb8u1 gitweb 1:2.1.4-2.1+deb8u1 linux-image-3.16.0-4-amd64 3.16.7-ckt20-1+deb8u2 linux-libc-dev 3.16.7-ckt20-1+deb8u2 ======================================================================== Package Details: Lecture des fichiers de modifications (« changelog »)... --- Modifications pour git (git git-man gitweb) --- git (1:2.1.4-2.1+deb8u1) jessie-security; urgency=high * Non-maintainer upload by the Security Team. * Fix CVE-2015-7545, arbitrary code execution issues via URLs with: - 01-CVE-2015-7545-1.patch: add a protocol-whitelist environment variable - 02-CVE-2015-7545-2.patch: allow only certain protocols for submodule fetches - 03-CVE-2015-7545-3.patch: refactor protocol whitelist code - 04-CVE-2015-7545-4.patch: limit redirection to protocol-whitelist - 05-CVE-2015-7545-5.patch: limit redirection depth * Make new tests executable. -- Laszlo Boszormenyi (GCS) <gcs(a)debian.org> Wed, 16 Dec 2015 08:24:37 +0000 --- Modifications pour linux (linux-image-3.16.0-4-amd64 linux-libc-dev) --- linux (3.16.7-ckt20-1+deb8u2) jessie-security; urgency=medium * [xen] Fix race conditions in back-end drivers (CVE-2015-8550, XSA-155) * [xen] pciback: Fix state validation in MSI control operations (CVE-2015-8551, CVE-2015-8852, XSA-157) * pptp: verify sockaddr_len in pptp_bind() and pptp_connect() (CVE-2015-8569) * bluetooth: Validate socket address length in sco_sock_bind() (CVE-2015-8575) * ptrace: being capable wrt a process requires mapped uids/gids (CVE-2015-8709) * KEYS: Fix race between read and revoke (CVE-2015-7550) * [x86] KVM: Reload pit counters for all channels when restoring state (CVE-2015-7513) * udp: properly support MSG_PEEK with truncated buffers (Closes: #808293, regression in 3.16.7-ckt17) * Revert "xhci: don't finish a TD if we get a short transfer event mid TD" (Closes: #808602, #808953, regression in 3.16.7-ckt20) -- Ben Hutchings <ben(a)decadent.org.uk> Sat, 02 Jan 2016 03:31:39 +0000 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on quigon.federez.net -- apticron

10 années, 2 mois

2 Debian package update(s) for baldrick.crans.org

par root＠baldrick.crans.org

apticron report [Tue, 05 Jan 2016 20:44:27 +0100] ======================================================================== apticron has detected that some packages need upgrading on: baldrick.crans.org [ 138.231.142.239 2a01:240:fe3d:4:62:61ff:fe6c:6401 138.231.142.239 ] [ 2a01:240:fe3d:4:62:61ff:fe6c:6401 ] The following packages are currently pending an upgrade: linux-image-3.16.0-4-amd64 3.16.7-ckt20-1+deb8u2 linux-libc-dev 3.16.7-ckt20-1+deb8u2 ======================================================================== Package Details: Lecture des fichiers de modifications (« changelog »)... --- Modifications pour linux (linux-image-3.16.0-4-amd64 linux-libc-dev) --- linux (3.16.7-ckt20-1+deb8u2) jessie-security; urgency=medium * [xen] Fix race conditions in back-end drivers (CVE-2015-8550, XSA-155) * [xen] pciback: Fix state validation in MSI control operations (CVE-2015-8551, CVE-2015-8852, XSA-157) * pptp: verify sockaddr_len in pptp_bind() and pptp_connect() (CVE-2015-8569) * bluetooth: Validate socket address length in sco_sock_bind() (CVE-2015-8575) * ptrace: being capable wrt a process requires mapped uids/gids (CVE-2015-8709) * KEYS: Fix race between read and revoke (CVE-2015-7550) * [x86] KVM: Reload pit counters for all channels when restoring state (CVE-2015-7513) * udp: properly support MSG_PEEK with truncated buffers (Closes: #808293, regression in 3.16.7-ckt17) * Revert "xhci: don't finish a TD if we get a short transfer event mid TD" (Closes: #808602, #808953, regression in 3.16.7-ckt20) -- Ben Hutchings <ben(a)decadent.org.uk> Sat, 02 Jan 2016 03:31:39 +0000 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on baldrick.crans.org -- apticron

10 années, 2 mois

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

Monitoring Janvier 2016