Search found 3 matches

by kluch
2020/05/31 15:59:02
Forum: CentOS 8 - Security Support
Topic: Missing Centos 8 announcements
Replies: 2
Views: 349

Re: Missing Centos 8 announcements

Thanks for explanation, but I must also notice that because of lack of these announcements Tenable Nessus does not provide plugins for Centos 8. It was their official answer on my ticket. It means that you can have vulnerable CentOS 8 even if Nessus shows that it is OK.
by kluch
2020/05/31 06:11:32
Forum: CentOS 8 - Security Support
Topic: Missing Centos 8 announcements
Replies: 2
Views: 349

Missing Centos 8 announcements

Hi, I wonder why there are no announcements on list for new patched versions for: CESA-2020:0487 (sudo) - (equivalent of RHEL8's https://access.redhat.com/errata/RHSA-2020:0487) CESA-2020:0902 (icu) - (eq. https://access.redhat.com/errata/RHSA-2020:0902) CESA-2020:1372 (kernel) - (eq. https://access...
by kluch
2020/05/31 06:00:25
Forum: CentOS 8 - Security Support
Topic: Centos 8 httpd updates
Replies: 5
Views: 714

Re: Centos 8 httpd updates

Hi, I had the same situation with Nessus. Solution was to set "ServerTokens Prod" in Apache conf (scanner probably read useless Apache banner).

Go to advanced search