<html>
  <head>

    <meta http-equiv="content-type" content="text/html; charset=windows-1252">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <br>
    -----BEGIN PGP SIGNED MESSAGE----- <br>
    Hash: SHA1 <br>
     <br>
    Best get patching!<br>
    <br>
    <br>
    - -------- Forwarded Message --------<br>
    Subject:     [lugmaster] Urgent Bash Vulnerability<br>
    Date:     Thu, 25 Sep 2014 13:04:48 +0100<br>
    From:     Gavin Westwood (Lugadmin) <a class="moz-txt-link-rfc2396E" href="mailto:lug@gavinwestwood.co.uk"><lug@gavinwestwood.co.uk></a><br>
    Reply-To:     UK LUG Masters' private discussion
    <a class="moz-txt-link-rfc2396E" href="mailto:lugmaster@mailman.lug.org.uk"><lugmaster@mailman.lug.org.uk></a><br>
    To:     <a class="moz-txt-link-abbreviated" href="mailto:lugmaster@mailman.lug.org.uk">lugmaster@mailman.lug.org.uk</a><br>
    <br>
    <br>
    <br>
    You may want to pass this on to your emailing lists:<br>
    <br>
    <br>
    If you haven't already, apply any security updates for Bash for your<br>
    distribution.  A major vulnerability has been found and it seems
    that<br>
    there are still variant attacks that work, so expect further
    updates.<br>
    <br>
    I had already applied the updates for Debian last night on my
    servers, but<br>
    saw this article on the Guardian website today:<br>
<a class="moz-txt-link-freetext" href="http://www.theguardian.com/technology/2014/sep/25/bug-bash-software-could-be-bigger-threat-heartbleed">http://www.theguardian.com/technology/2014/sep/25/bug-bash-software-could-be-bigger-threat-heartbleed</a><br>
    <br>
    The Reg also has a good article on the subject:<br>
    <a class="moz-txt-link-freetext" href="http://www.theregister.co.uk/2014/09/24/bash_shell_vuln/">http://www.theregister.co.uk/2014/09/24/bash_shell_vuln/</a><br>
    <br>
    This email is the disclosure details:<br>
    <a class="moz-txt-link-freetext" href="http://seclists.org/oss-sec/2014/q3/650">http://seclists.org/oss-sec/2014/q3/650</a><br>
    <br>
    Thanks<br>
    <br>
    Gavin<br>
    <br>
    <br>
    <br>
    - -- <br>
    lugmaster mailing list<br>
    <a class="moz-txt-link-abbreviated" href="mailto:lugmaster@mailman.lug.org.uk">lugmaster@mailman.lug.org.uk</a><br>
    <a class="moz-txt-link-freetext" href="https://mailman.lug.org.uk/mailman/listinfo/lugmaster">https://mailman.lug.org.uk/mailman/listinfo/lugmaster</a><br>
    <br>
    <br>
    <br>
    -----BEGIN PGP SIGNATURE----- <br>
    Version: GnuPG v2 <br>
    Comment: Using GnuPG with Thunderbird - <a class="moz-txt-link-freetext" href="http://www.enigmail.net/">http://www.enigmail.net/</a> <br>
     <br>
    iEYEARECAAYFAlQkEokACgkQJx75J9BaYOoiyACdE9t+kpjANsY4x1mRRCqRG7RF <br>
    xH8AnR5WBB5C8OtTO0D/aY4IoVQXl4Z+ <br>
    =Fa4b <br>
    -----END PGP SIGNATURE----- <br>
    <br>
  </body>
</html>