On Tue, 2007-05-01 at 14:49 +0200, Erik RSCALOVER wrote:
> hi folks,
>  
> I'm having a problem here.I told my host to replace my outdated and
> soon unsupported OS Fedora Core 5 by RedHat Enterprise Linux 4
> (es).They did what i asked for.So I Installed the latest released
> rkhunter (1.2.9 )  and i do this 
>  
> cd /usr/local/bin
> ./rkhunter --update
> ./rkhunter -c
>  
> That complains about software version numbers being
>  
> GnuPG => oldf or patched version
> OpenSSL => old or patched version
> PHP 4.4.6 => unkown
>  
I have to admit that I don't like the application version check, it can
be very confusing. My RHEL4 system has PHP 4.3.9 installed by default;
GPG 1.2.6 (which is a bit old now), and openssl 0.9.7a, which too is a
bit old. The main thing is that RKH does not indicate that any of them
are known to be unsecure.

> next i do download "hashupd.sh" and run it and then try to run
> rkhunter again but it keeps on complaining about that software
>  
The hashupd.sh script is for file hash values, not application version
numbers. Running it will make no difference to the above.

> Also when you run this command
>  
> ./rkhunter --update
>  
> it downloads the downloads the updates  BUT if you issue the same
> command again it downloads the same update again and again ... instead
> of saying "no updates availible" ...
>  
Already fixed in CVS for the next release.

> I searched your maillinglists for possible answers but it isn't
> working it returns a 500 "internal server error" or it takes way to
> long to respond and display the results
>
I can find no error. The sourceforge archives show your original message
already there. No errors, and no slow response from doing a search. I
would first suggest trying again.


John.

-- 
---------------------------------------------------------------
John Horne, University of Plymouth, UK  Tel: +44 (0)1752 233914
E-mail: [EMAIL PROTECTED]       Fax: +44 (0)1752 233839

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Rkhunter-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/rkhunter-users

Reply via email to