Join the community today
Become a Member

Stable Branch fix CentOS 6 os-release detection and iconv CVE-2024-2961 mitigation …

Discussion in 'Centmin Mod Github Commits' started by eva2000, Oct 22, 2026 at 2:44 PM.

  1. eva2000

    eva2000 Administrator Staff Member

    60,036
    12,571
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,224
    Local Time:
    5:13 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    fix CentOS 6 os-release detection and iconv CVE-2024-2961 mitigation in 132.00stable


    CentOS 6 has no /etc/os-release, so EL_VERID and OS_PRETTY_NAME lookups
    printed awk/cat errors on every centmin.sh run, and the iconv
    CVE-2024-2961 mitigation targeted the EL8+ gconv-modules.d path and never
    applied on CentOS 6.

    Changes:
    - centmin.sh, centmin-cli.sh: guard EL_VERID and OS_PRETTY_NAME lookups
    with an /etc/os-release check, falling back to CentOS 6 values
    - tools/iconv-fixes.sh: same EL_VERID guard
    - tools/iconv-fixes.sh: use /usr/lib64/gconv/gconv-modules on CentOS 6
    as on CentOS 7
    - tools/iconv-fixes.sh: drop sudo from sed and iconvconfig calls, as
    sudo is not installed on minimal CentOS 6 and centmin.sh runs as root

    Continue reading...

    132.00stable branch