But I also see:

https://www.centos.org/modules/newbb/viewtopic.php?topic_id=32453&forum=42

Why is Red Hat being stubborn about fixing issues that could mean we use 
another Linux distro that fixes these issues?  :(  


James


________________________________
From: Marco Shaw <marco.s...@gmail.com>
To: rhelv5-list@redhat.com
Sent: Thursday, 28 July 2011, 15:55
Subject: Re: [rhelv5-list] Is RHEL 5.7 PCI compliant?

Even if old, this is *possibly* all you will run into:
http://blog.zenone.org/2009/03/pci-compliance-disable-sslv2-and-weak.html

Windows-focused, but still generally applicable.  I think if you just
search for some key terms like "apache httpd 2.2.3 pci", you will get
some good information...

Marco

On Thu, Jul 28, 2011 at 11:44 AM, James Harrison
<jamesaharriso...@yahoo.co.uk> wrote:
> Thanks for the quick reply everyone.
> I understand its not the whole OS and all machines and its all in the
> implementation and we do have an auditor, however, scans show httpd 2.2.14
> as having vulnerabilities. Will the httpd 2.2.3 supplied by RH throw up all
> kinds of vulnerabilities, because of its lower patch level?

_______________________________________________
rhelv5-list mailing list
rhelv5-list@redhat.com
https://www.redhat.com/mailman/listinfo/rhelv5-list
_______________________________________________
rhelv5-list mailing list
rhelv5-list@redhat.com
https://www.redhat.com/mailman/listinfo/rhelv5-list

Reply via email to