Monitoring Décembre 2017

monitoring@federez.net

7 participants
129 discussions

11 Debian package update(s) for quigon.federez.net

par root＠quigon.federez.net

apticron report [Fri, 29 Dec 2017 22:38:06 +0100] ======================================================================== apticron has detected that some packages need upgrading on: quigon.federez.net [ 160.228.155.65 ] The following packages are currently pending an upgrade: imagemagick 8:6.9.7.4+dfsg-11+deb9u4 imagemagick-6-common 8:6.9.7.4+dfsg-11+deb9u4 imagemagick-6.q16 8:6.9.7.4+dfsg-11+deb9u4 libmagickcore-6.q16-3 8:6.9.7.4+dfsg-11+deb9u4 libmagickcore-6.q16-3-extra 8:6.9.7.4+dfsg-11+deb9u4 libmagickwand-6.q16-3 8:6.9.7.4+dfsg-11+deb9u4 libssl1.0.2 1.0.2l-2+deb9u2 linux-image-4.9.0-4-amd64 4.9.65-3+deb9u1 linux-libc-dev 4.9.65-3+deb9u1 rsync 3.1.2-1+deb9u1 sensible-utils 0.0.9+deb9u1 ======================================================================== Package Details: apt-listchanges : Lecture des fichiers de modifications (« changelog »)... apt-listchanges : journaux des modifications (« changelogs ») ------------------------------------------------------------- --- Modifications pour linux (linux-image-4.9.0-4-amd64 linux-libc-dev) --- linux (4.9.65-3+deb9u1) stretch-security; urgency=high * dccp: CVE-2017-8824: use-after-free in DCCP code * media: dvb-usb-v2: lmedm04: Improve logic checking of warm start (CVE-2017-16538) * media: dvb-usb-v2: lmedm04: move ts2020 attach to dm04_lme2510_tuner (CVE-2017-16538) * media: hdpvr: Fix an error handling path in hdpvr_probe() (CVE-2017-16644) * bpf/verifier: Fix multiple security issues: - adjust insn_aux_data when patching insns - fix branch pruning logic - reject out-of-bounds stack pointer calculation - fix incorrect sign extension in check_alu_op() (CVE-2017-16995) - Fix states_equal() comparison of pointer and UNKNOWN * netfilter: nfnetlink_cthelper: Add missing permission checks (CVE-2017-17448) * netlink: Add netns check on taps (CVE-2017-17449) * netfilter: xt_osf: Add missing permission checks (CVE-2017-17450) * USB: core: prevent malicious bNumInterfaces overflow (CVE-2017-17558) * net: ipv4: fix for a race condition in raw_sendmsg (CVE-2017-17712) * [armhf,arm64,x86] KVM: Fix stack-out-of-bounds read in write_mmio (CVE-2017-17741) * crypto: salsa20 - fix blkcipher_walk API usage (CVE-2017-17805) * crypto: hmac - require that the underlying hash algorithm is unkeyed (CVE-2017-17806) * KEYS: add missing permission check for request_key() destination (CVE-2017-17807) * [x86] KVM: VMX: remove I/O port 0x80 bypass on Intel hosts (CVE-2017-1000407) * bluetooth: Prevent stack info leak from the EFS element. (CVE-2017-1000410) -- Ben Hutchings <ben(a)decadent.org.uk> Sat, 23 Dec 2017 00:39:51 +0000 --- Modifications pour openssl1.0 (libssl1.0.2) --- openssl1.0 (1.0.2l-2+deb9u2) stretch-security; urgency=high * CVE-2017-3737 (Read/write after SSL object in error state) * Add a testcase for CVE-2017-3737 * CVE-2017-3738 (rsaz_1024_mul_avx2 overflow bug on x86_64) -- Sebastian Andrzej Siewior <sebastian(a)breakpoint.cc> Wed, 13 Dec 2017 23:09:47 +0100 --- Modifications pour rsync --- rsync (3.1.2-1+deb9u1) stretch-security; urgency=high * Non-maintainer upload by the Security Team. * Enforce trailing \0 when receiving xattr name values (CVE-2017-16548) (Closes: #880954) * Check fname in recv_files sooner (CVE-2017-17433) (Closes: #883667) * Sanitize xname in read_ndx_and_attrs (CVE-2017-17434) (Closes: #883665) * Check daemon filter against fnamecmp in recv_files() (CVE-2017-17434) (Closes: #883665) -- Salvatore Bonaccorso <carnil(a)debian.org> Sun, 10 Dec 2017 13:57:17 +0100 --- Modifications pour sensible-utils --- sensible-utils (0.0.9+deb9u1) stretch-security; urgency=high * Non-maintainer upload by the Security Team. * Argument injection in sensible-browser (CVE-2017-17512) Thanks to Gabriel Corona (Closes: #881767) -- Salvatore Bonaccorso <carnil(a)debian.org> Wed, 20 Dec 2017 14:39:04 +0100 --- Modifications pour imagemagick (imagemagick imagemagick-6-common imagemagick-6.q16 libmagickcore-6.q16-3 libmagickcore-6.q16-3-extra libmagickwand-6.q16-3) --- imagemagick (8:6.9.7.4+dfsg-11+deb9u4) stretch-security; urgency=medium * CVE-2017-12877 (Closes: #872373) * CVE-2017-16546 (Closes: #881392) * CVE-2017-17499 * CVE-2017-17504 * CVE-2017-17879 (Closes: #885125) -- Moritz Muehlenhoff <jmm(a)debian.org> Tue, 26 Dec 2017 12:24:39 +0000 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on quigon.federez.net -- apticron

7 années, 3 mois

Undelivered Mail Returned to Sender

par MAILER-DAEMON＠nonagon.crans.org

This is the mail system at host nonagon.crans.org. I'm sorry to have to inform you that your message could not be delivered to one or more recipients. It's attached below. For further assistance, please send mail to postmaster. If you do so, please include this problem report. You can delete your own text from the attached returned message. The mail system <monitoring(a)federez.net> (expanded from <root>): host smtp.crans.org[2a06:e042:100:4:200:9ff:fe04:1901] said: 550 5.1.0 <root(a)nonagon.crans.org>: Sender address rejected: User unknown in relay recipient table (in reply to RCPT TO command)

7 années, 3 mois

Cron <root@quigon> /root/scripts/renew_letsencrypt_certificates.sh 1>/dev/null

par root＠quigon.rez-gif.supelec.fr

Failed authorization procedure. ldap-ro.federez.net (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://ldap-ro.federez.net/.well-known/acme-challenge/WMKG6uHLxRDTmKP_GLvfA…: "<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>404 Not Found</title> </head><body> <h1>Not Found</h1> <p", wiki-backup.federez.net (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://wiki-backup.federez.net/.well-known/acme-challenge/CpHijnXn4d9wgx2Tu…: "<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>404 Not Found</title> </head><body> <h1>Not Found</h1> <p"

7 années, 3 mois

11 Debian package update(s) for quigon.federez.net

par root＠quigon.federez.net

apticron report [Thu, 28 Dec 2017 22:38:05 +0100] ======================================================================== apticron has detected that some packages need upgrading on: quigon.federez.net [ 160.228.155.65 ] The following packages are currently pending an upgrade: imagemagick 8:6.9.7.4+dfsg-11+deb9u4 imagemagick-6-common 8:6.9.7.4+dfsg-11+deb9u4 imagemagick-6.q16 8:6.9.7.4+dfsg-11+deb9u4 libmagickcore-6.q16-3 8:6.9.7.4+dfsg-11+deb9u4 libmagickcore-6.q16-3-extra 8:6.9.7.4+dfsg-11+deb9u4 libmagickwand-6.q16-3 8:6.9.7.4+dfsg-11+deb9u4 libssl1.0.2 1.0.2l-2+deb9u2 linux-image-4.9.0-4-amd64 4.9.65-3+deb9u1 linux-libc-dev 4.9.65-3+deb9u1 rsync 3.1.2-1+deb9u1 sensible-utils 0.0.9+deb9u1 ======================================================================== Package Details: apt-listchanges : Lecture des fichiers de modifications (« changelog »)... apt-listchanges : journaux des modifications (« changelogs ») ------------------------------------------------------------- --- Modifications pour linux (linux-image-4.9.0-4-amd64 linux-libc-dev) --- linux (4.9.65-3+deb9u1) stretch-security; urgency=high * dccp: CVE-2017-8824: use-after-free in DCCP code * media: dvb-usb-v2: lmedm04: Improve logic checking of warm start (CVE-2017-16538) * media: dvb-usb-v2: lmedm04: move ts2020 attach to dm04_lme2510_tuner (CVE-2017-16538) * media: hdpvr: Fix an error handling path in hdpvr_probe() (CVE-2017-16644) * bpf/verifier: Fix multiple security issues: - adjust insn_aux_data when patching insns - fix branch pruning logic - reject out-of-bounds stack pointer calculation - fix incorrect sign extension in check_alu_op() (CVE-2017-16995) - Fix states_equal() comparison of pointer and UNKNOWN * netfilter: nfnetlink_cthelper: Add missing permission checks (CVE-2017-17448) * netlink: Add netns check on taps (CVE-2017-17449) * netfilter: xt_osf: Add missing permission checks (CVE-2017-17450) * USB: core: prevent malicious bNumInterfaces overflow (CVE-2017-17558) * net: ipv4: fix for a race condition in raw_sendmsg (CVE-2017-17712) * [armhf,arm64,x86] KVM: Fix stack-out-of-bounds read in write_mmio (CVE-2017-17741) * crypto: salsa20 - fix blkcipher_walk API usage (CVE-2017-17805) * crypto: hmac - require that the underlying hash algorithm is unkeyed (CVE-2017-17806) * KEYS: add missing permission check for request_key() destination (CVE-2017-17807) * [x86] KVM: VMX: remove I/O port 0x80 bypass on Intel hosts (CVE-2017-1000407) * bluetooth: Prevent stack info leak from the EFS element. (CVE-2017-1000410) -- Ben Hutchings <ben(a)decadent.org.uk> Sat, 23 Dec 2017 00:39:51 +0000 --- Modifications pour openssl1.0 (libssl1.0.2) --- openssl1.0 (1.0.2l-2+deb9u2) stretch-security; urgency=high * CVE-2017-3737 (Read/write after SSL object in error state) * Add a testcase for CVE-2017-3737 * CVE-2017-3738 (rsaz_1024_mul_avx2 overflow bug on x86_64) -- Sebastian Andrzej Siewior <sebastian(a)breakpoint.cc> Wed, 13 Dec 2017 23:09:47 +0100 --- Modifications pour rsync --- rsync (3.1.2-1+deb9u1) stretch-security; urgency=high * Non-maintainer upload by the Security Team. * Enforce trailing \0 when receiving xattr name values (CVE-2017-16548) (Closes: #880954) * Check fname in recv_files sooner (CVE-2017-17433) (Closes: #883667) * Sanitize xname in read_ndx_and_attrs (CVE-2017-17434) (Closes: #883665) * Check daemon filter against fnamecmp in recv_files() (CVE-2017-17434) (Closes: #883665) -- Salvatore Bonaccorso <carnil(a)debian.org> Sun, 10 Dec 2017 13:57:17 +0100 --- Modifications pour sensible-utils --- sensible-utils (0.0.9+deb9u1) stretch-security; urgency=high * Non-maintainer upload by the Security Team. * Argument injection in sensible-browser (CVE-2017-17512) Thanks to Gabriel Corona (Closes: #881767) -- Salvatore Bonaccorso <carnil(a)debian.org> Wed, 20 Dec 2017 14:39:04 +0100 --- Modifications pour imagemagick (imagemagick imagemagick-6-common imagemagick-6.q16 libmagickcore-6.q16-3 libmagickcore-6.q16-3-extra libmagickwand-6.q16-3) --- imagemagick (8:6.9.7.4+dfsg-11+deb9u4) stretch-security; urgency=medium * CVE-2017-12877 (Closes: #872373) * CVE-2017-16546 (Closes: #881392) * CVE-2017-17499 * CVE-2017-17504 * CVE-2017-17879 (Closes: #885125) -- Moritz Muehlenhoff <jmm(a)debian.org> Tue, 26 Dec 2017 12:24:39 +0000 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on quigon.federez.net -- apticron

7 années, 3 mois

Undelivered Mail Returned to Sender

par MAILER-DAEMON＠nonagon.crans.org

7 années, 3 mois

Cron <root@quigon> /root/scripts/renew_letsencrypt_certificates.sh 1>/dev/null

par root＠quigon.rez-gif.supelec.fr

Failed authorization procedure. ldap-ro.federez.net (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://ldap-ro.federez.net/.well-known/acme-challenge/oQhMMFgDkBXl0WlMTLi5m…: "<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>404 Not Found</title> </head><body> <h1>Not Found</h1> <p", wiki-backup.federez.net (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://wiki-backup.federez.net/.well-known/acme-challenge/iGrtviY52vc_7IFhz…: "<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>404 Not Found</title> </head><body> <h1>Not Found</h1> <p"

7 années, 3 mois

Cron <root@quigon> obnam --config /etc/obnam/to_kdell.profile backup 1>/dev/null

par root＠quigon.rez-gif.supelec.fr

ssh: connect to host kdell.federez.net port 22: No route to host Traceback (most recent call last): File "/usr/lib/python2.7/dist-packages/cliapp/app.py", line 189, in _run self.process_args(args) File "/usr/lib/python2.7/dist-packages/obnamlib/app.py", line 222, in process_args cliapp.Application.process_args(self, args) File "/usr/lib/python2.7/dist-packages/cliapp/app.py", line 589, in process_args method(args[1:]) File "/usr/lib/python2.7/dist-packages/obnamlib/plugins/backup_plugin.py", line 162, in backup self.start_backup() File "/usr/lib/python2.7/dist-packages/obnamlib/plugins/backup_plugin.py", line 199, in start_backup self.repo = self.open_repository() File "/usr/lib/python2.7/dist-packages/obnamlib/plugins/backup_plugin.py", line 224, in open_repository return self.app.get_repository_object(create=True) File "/usr/lib/python2.7/dist-packages/obnamlib/app.py", line 258, in get_repository_object repofs.connect() File "/usr/lib/python2.7/dist-packages/obnamlib/plugins/sftp_plugin.py", line 195, in connect if not try_openssh or not self._connect_openssh(): File "/usr/lib/python2.7/dist-packages/obnamlib/plugins/sftp_plugin.py", line 239, in _connect_openssh self.sftp = paramiko.SFTPClient(SSHChannelAdapter(proc)) File "/usr/lib/python2.7/dist-packages/paramiko/sftp_client.py", line 101, in __init__ raise SSHException('EOF during negotiation') SSHException: EOF during negotiation

7 années, 3 mois

5 Debian package update(s) for quigon.federez.net

par root＠quigon.federez.net

apticron report [Wed, 27 Dec 2017 22:38:05 +0100] ======================================================================== apticron has detected that some packages need upgrading on: quigon.federez.net [ 160.228.155.65 ] The following packages are currently pending an upgrade: libssl1.0.2 1.0.2l-2+deb9u2 linux-image-4.9.0-4-amd64 4.9.65-3+deb9u1 linux-libc-dev 4.9.65-3+deb9u1 rsync 3.1.2-1+deb9u1 sensible-utils 0.0.9+deb9u1 ======================================================================== Package Details: apt-listchanges : Lecture des fichiers de modifications (« changelog »)... apt-listchanges : journaux des modifications (« changelogs ») ------------------------------------------------------------- --- Modifications pour linux (linux-image-4.9.0-4-amd64 linux-libc-dev) --- linux (4.9.65-3+deb9u1) stretch-security; urgency=high * dccp: CVE-2017-8824: use-after-free in DCCP code * media: dvb-usb-v2: lmedm04: Improve logic checking of warm start (CVE-2017-16538) * media: dvb-usb-v2: lmedm04: move ts2020 attach to dm04_lme2510_tuner (CVE-2017-16538) * media: hdpvr: Fix an error handling path in hdpvr_probe() (CVE-2017-16644) * bpf/verifier: Fix multiple security issues: - adjust insn_aux_data when patching insns - fix branch pruning logic - reject out-of-bounds stack pointer calculation - fix incorrect sign extension in check_alu_op() (CVE-2017-16995) - Fix states_equal() comparison of pointer and UNKNOWN * netfilter: nfnetlink_cthelper: Add missing permission checks (CVE-2017-17448) * netlink: Add netns check on taps (CVE-2017-17449) * netfilter: xt_osf: Add missing permission checks (CVE-2017-17450) * USB: core: prevent malicious bNumInterfaces overflow (CVE-2017-17558) * net: ipv4: fix for a race condition in raw_sendmsg (CVE-2017-17712) * [armhf,arm64,x86] KVM: Fix stack-out-of-bounds read in write_mmio (CVE-2017-17741) * crypto: salsa20 - fix blkcipher_walk API usage (CVE-2017-17805) * crypto: hmac - require that the underlying hash algorithm is unkeyed (CVE-2017-17806) * KEYS: add missing permission check for request_key() destination (CVE-2017-17807) * [x86] KVM: VMX: remove I/O port 0x80 bypass on Intel hosts (CVE-2017-1000407) * bluetooth: Prevent stack info leak from the EFS element. (CVE-2017-1000410) -- Ben Hutchings <ben(a)decadent.org.uk> Sat, 23 Dec 2017 00:39:51 +0000 --- Modifications pour openssl1.0 (libssl1.0.2) --- openssl1.0 (1.0.2l-2+deb9u2) stretch-security; urgency=high * CVE-2017-3737 (Read/write after SSL object in error state) * Add a testcase for CVE-2017-3737 * CVE-2017-3738 (rsaz_1024_mul_avx2 overflow bug on x86_64) -- Sebastian Andrzej Siewior <sebastian(a)breakpoint.cc> Wed, 13 Dec 2017 23:09:47 +0100 --- Modifications pour rsync --- rsync (3.1.2-1+deb9u1) stretch-security; urgency=high * Non-maintainer upload by the Security Team. * Enforce trailing \0 when receiving xattr name values (CVE-2017-16548) (Closes: #880954) * Check fname in recv_files sooner (CVE-2017-17433) (Closes: #883667) * Sanitize xname in read_ndx_and_attrs (CVE-2017-17434) (Closes: #883665) * Check daemon filter against fnamecmp in recv_files() (CVE-2017-17434) (Closes: #883665) -- Salvatore Bonaccorso <carnil(a)debian.org> Sun, 10 Dec 2017 13:57:17 +0100 --- Modifications pour sensible-utils --- sensible-utils (0.0.9+deb9u1) stretch-security; urgency=high * Non-maintainer upload by the Security Team. * Argument injection in sensible-browser (CVE-2017-17512) Thanks to Gabriel Corona (Closes: #881767) -- Salvatore Bonaccorso <carnil(a)debian.org> Wed, 20 Dec 2017 14:39:04 +0100 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on quigon.federez.net -- apticron

7 années, 3 mois

Undelivered Mail Returned to Sender

par MAILER-DAEMON＠nonagon.crans.org

7 années, 3 mois

Cron <root@quigon> /root/scripts/renew_letsencrypt_certificates.sh 1>/dev/null

par root＠quigon.rez-gif.supelec.fr

Failed authorization procedure. ldap-ro.federez.net (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://ldap-ro.federez.net/.well-known/acme-challenge/gVRC74WrAg2dcM3eixkTu…: "<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>404 Not Found</title> </head><body> <h1>Not Found</h1> <p", wiki-backup.federez.net (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://wiki-backup.federez.net/.well-known/acme-challenge/GmXuK_wzSivtWHh8P…: "<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>404 Not Found</title> </head><body> <h1>Not Found</h1> <p"

7 années, 3 mois

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

Monitoring Décembre 2017