[SOLVED] Nginx EPEL update question

Support for security such as Firewalls and securing linux
Post Reply
theNADS
Posts: 69
Joined: 2009/10/20 12:57:10
Location: East Midlands, UK

[SOLVED] Nginx EPEL update question

Post by theNADS » 2012/04/12 01:21:23

Hello,

I think my server is running an old version of nginx, but I cannot seem to get it updated.

Nginx from the EPEL repo is:

nginx-0.8.55-2.el5.i386 [390 KiB] Changelog by Jeremy Hinegardner (2012-03-17): - patch for CVE-2012-1180
(http://dl.fedoraproject.org/pub/epel/5/i386/repoview/nginx.html)

May be I am not sure what I am looking at when I check the nginx version on my system, but it appears to be older:

[root@rproxy ~]# rpm -qi nginx
Name : nginx Relocations: (not relocatable)
Version : 0.8.55 Vendor: Fedora Project
Release : 1.el5 Build Date: Tue 30 Aug 2011 03:49:28 AM BST
Install Date: Sat 17 Sep 2011 04:59:24 PM BST Build Host: x86-01.phx2.fedoraproject.org
Group : System Environment/Daemons Source RPM: nginx-0.8.55-1.el5.src.rpm
Size : 926679 License: BSD
Signature : DSA/SHA1, Tue 30 Aug 2011 07:20:03 PM BST, Key ID 119cc036217521f6
Packager : Fedora Project
URL : http://nginx.net/
Summary : Robust, small and high performance HTTP and reverse proxy server
Description :
Nginx [engine x] is an HTTP(S) server, HTTP(S) reverse proxy and IMAP/POP3
proxy server written by Igor Sysoev.

[root@rproxy ~]# rpm -q --changelog nginx | grep CVE
- fixes CVE-2009-3555
- fixes CVE-2009-2629

I have made a few attempts to get nginx to update but nothing seems to work:

[root@rproxy ~]# yum --enablerepo=epel update nginx
Loaded plugins: fastestmirror, priorities
Loading mirror speeds from cached hostfile
* base: mirror.sov.uk.goscomb.net
* epel: mirrors.coreix.net
* extras: mirror.sov.uk.goscomb.net
* updates: mirror.oxilion.nl
229 packages excluded due to repository priority protections
Setting up Update Process
No Packages marked for Update
[root@rproxy ~]#

The base system is on Centos 5.8 and seems to update fine, but nginx does not seem to want to update. Can anyone offer any advice on this?

pschaff
Retired Moderator
Posts: 18276
Joined: 2006/12/13 20:15:34
Location: Tidewater, Virginia, North America
Contact:

[SOLVED] Nginx EPEL update question

Post by pschaff » 2012/04/12 01:30:08

You are definitely running nginx-0.8.55-1.el5 when nginx-0.8.55-2.el5 is available. Try[code]yum --enablerepo=epel clean all
yum --noplugins --enablerepo=epel update nginx[/code]

If more help is needed then please [url=http://www.centos.org/modules/newbb/viewtopic.php?topic_id=28723&forum=54]provide more information about your system[/url] by running "getinfo.sh package" and showing us the output file.

theNADS
Posts: 69
Joined: 2009/10/20 12:57:10
Location: East Midlands, UK

Re: Nginx EPEL update question

Post by theNADS » 2012/04/12 10:45:41

This system just does not want to play nice!

[root@rproxy ~]# yum --enablerepo=epel clean all
Loaded plugins: fastestmirror, priorities
Loading mirror speeds from cached hostfile
* base: mirror.sov.uk.goscomb.net
* epel: mirrors.coreix.net
* extras: mirror.sov.uk.goscomb.net
* updates: mirror.oxilion.nl
Cleaning up Everything
Cleaning up list of fastest mirrors
[root@rproxy ~]# yum --noplugins --enablerepo=epel update nginx
base | 1.1 kB 00:00
base/primary | 967 kB 00:03
base 2725/2725
epel | 2.6 kB 00:00
epel/primary_db | 514 kB 00:01
extras | 2.1 kB 00:00
extras/primary_db | 166 kB 00:00
updates | 1.9 kB 00:00
updates/primary_db | 198 kB 00:00
Setting up Update Process
No Packages marked for Update
[root@rproxy ~]#

I had tried a few clean all's, but I just cannot seem to get yum to update nginx.

Any more ideas?

pschaff
Retired Moderator
Posts: 18276
Joined: 2006/12/13 20:15:34
Location: Tidewater, Virginia, North America
Contact:

Re: Nginx EPEL update question

Post by pschaff » 2012/04/12 11:36:59

I can't explain it. It is on the mirror you are using:
http://mirrors.coreix.net/fedora-epel/5/i386/nginx-0.8.55-2.el5.i386.rpm

Perhaps provide the previously requested information, and the epel.repo configuration.

theNADS
Posts: 69
Joined: 2009/10/20 12:57:10
Location: East Midlands, UK

Re: Nginx EPEL update question

Post by theNADS » 2012/04/12 12:28:49

It will be something I have messed up somewhere. It normally is!

[root@rproxy ~]# vi /etc/yum.repos.d/epel.repo

[code]
[epel]
name=Extra Packages for Enterprise Linux 5 - $basearch
#baseurl=http://download.fedoraproject.org/pub/epel/5/$basearch
mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=epel-5&arch=$basearch
failovermethod=priority
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
priority=50
name=Extra Packages for Enterprise Linux 5 - $basearch - Debug
#baseurl=http://download.fedoraproject.org/pub/epel/5/$basearch/debug
mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=epel-debug-5&arch=$basearch
failovermethod=priority
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
gpgcheck=1

[epel-source]
name=Extra Packages for Enterprise Linux 5 - $basearch - Source
#baseurl=http://download.fedoraproject.org/pub/epel/5/SRPMS
mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=epel-source-5&arch=$basearch
failovermethod=priority
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
gpgcheck=1
[/code]

[root@rproxy ~]# ./getinfo.sh basic

Basic system information.
[code]
== BEGIN uname -rmi ==
2.6.18-308.1.1.el5xen i686 i386
== END uname -rmi ==

== BEGIN rpm -qa \*-release\* ==
epel-release-5-4
atomic-release-1.0-14.el5.art
centos-release-notes-5.8-0
centos-release-5-8.el5.centos
== END rpm -qa \*-release\* ==

== BEGIN cat /etc/redhat-release ==
CentOS release 5.8 (Final)
== END cat /etc/redhat-release ==

== BEGIN getenforce ==
Enforcing
== END getenforce ==

== BEGIN free -m ==
total used free shared buffers cached
Mem: 512 489 23 0 95 275
-/+ buffers/cache: 118 393
Swap: 1055 0 1055
== END free -m ==

[/code]

[root@rproxy ~]# ./getinfo.sh package

http://pastebin.com/Ls5SC5ex

pschaff
Retired Moderator
Posts: 18276
Joined: 2006/12/13 20:15:34
Location: Tidewater, Virginia, North America
Contact:

Re: Nginx EPEL update question

Post by pschaff » 2012/04/12 13:17:05

[quote]
theNADS wrote:
It will be something I have messed up somewhere. It normally is![/quote]
You have nailed it! :-)

[quote]
[root@rproxy ~]# vi /etc/yum.repos.d/epel.repo

[code]
[epel]
name=Extra Packages for Enterprise Linux 5 - $basearch
#baseurl=http://download.fedoraproject.org/pub/epel/5/$basearch
mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=epel-5&arch=$basearch
failovermethod=priority
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
priority=50

[color=ff0000][b][epel-debuginfo][/b][/color]
name=Extra Packages for Enterprise Linux 5 - $basearch - Debug
#baseurl=http://download.fedoraproject.org/pub/epel/5/$basearch/debug
mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=epel-debug-5&arch=$basearch
failovermethod=priority
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
gpgcheck=1

[epel-source]
name=Extra Packages for Enterprise Linux 5 - $basearch - Source
#baseurl=http://download.fedoraproject.org/pub/epel/5/SRPMS
mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=epel-source-5&arch=$basearch
failovermethod=priority
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
gpgcheck=1
[/code]
[/quote]
Restore the missing line above and I suspect the situation will improve.

theNADS
Posts: 69
Joined: 2009/10/20 12:57:10
Location: East Midlands, UK

Re: Nginx EPEL update question

Post by theNADS » 2012/04/12 13:43:40

Cheers Phil, I must have deleted a couple of lines in that file by accident somehow.

I remember thinking that this file looked a bit odd late last night. I should have twigged this file was causing the problem myself really!

[code]
[root@rproxy ~]# rpm -qi nginx
Name : nginx Relocations: (not relocatable)
Version : 0.8.55 Vendor: Fedora Project
Release : 2.el5 Build Date: Sun 18 Mar 2012 02:48:52 AM GMT
Install Date: Thu 12 Apr 2012 02:30:00 PM BST Build Host: x86-16.phx2.fedoraproject.org
Group : System Environment/Daemons Source RPM: nginx-0.8.55-2.el5.src.rpm
Size : 926679 License: BSD
Signature : DSA/SHA1, Sun 18 Mar 2012 03:44:08 PM GMT, Key ID 119cc036217521f6
Packager : Fedora Project
URL : http://nginx.net/
Summary : Robust, small and high performance HTTP and reverse proxy server
Description :
Nginx [engine x] is an HTTP(S) server, HTTP(S) reverse proxy and IMAP/POP3
proxy server written by Igor Sysoev.
[/code]

Thanks for you assistance :-D

pschaff
Retired Moderator
Posts: 18276
Joined: 2006/12/13 20:15:34
Location: Tidewater, Virginia, North America
Contact:

Re: [SOLVED] Nginx EPEL update question

Post by pschaff » 2012/04/12 13:45:06

You are welcome. Thanks for reporting back. Marking this thread [SOLVED] for posterity.

Post Reply