<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=windows-1252">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
-----BEGIN PGP SIGNED MESSAGE----- <br>
Hash: SHA1 <br>
<br>
Best get patching!<br>
<br>
<br>
- -------- Forwarded Message --------<br>
Subject: [lugmaster] Urgent Bash Vulnerability<br>
Date: Thu, 25 Sep 2014 13:04:48 +0100<br>
From: Gavin Westwood (Lugadmin) <a class="moz-txt-link-rfc2396E" href="mailto:lug@gavinwestwood.co.uk"><lug@gavinwestwood.co.uk></a><br>
Reply-To: UK LUG Masters' private discussion
<a class="moz-txt-link-rfc2396E" href="mailto:lugmaster@mailman.lug.org.uk"><lugmaster@mailman.lug.org.uk></a><br>
To: <a class="moz-txt-link-abbreviated" href="mailto:lugmaster@mailman.lug.org.uk">lugmaster@mailman.lug.org.uk</a><br>
<br>
<br>
<br>
You may want to pass this on to your emailing lists:<br>
<br>
<br>
If you haven't already, apply any security updates for Bash for your<br>
distribution. A major vulnerability has been found and it seems
that<br>
there are still variant attacks that work, so expect further
updates.<br>
<br>
I had already applied the updates for Debian last night on my
servers, but<br>
saw this article on the Guardian website today:<br>
<a class="moz-txt-link-freetext" href="http://www.theguardian.com/technology/2014/sep/25/bug-bash-software-could-be-bigger-threat-heartbleed">http://www.theguardian.com/technology/2014/sep/25/bug-bash-software-could-be-bigger-threat-heartbleed</a><br>
<br>
The Reg also has a good article on the subject:<br>
<a class="moz-txt-link-freetext" href="http://www.theregister.co.uk/2014/09/24/bash_shell_vuln/">http://www.theregister.co.uk/2014/09/24/bash_shell_vuln/</a><br>
<br>
This email is the disclosure details:<br>
<a class="moz-txt-link-freetext" href="http://seclists.org/oss-sec/2014/q3/650">http://seclists.org/oss-sec/2014/q3/650</a><br>
<br>
Thanks<br>
<br>
Gavin<br>
<br>
<br>
<br>
- -- <br>
lugmaster mailing list<br>
<a class="moz-txt-link-abbreviated" href="mailto:lugmaster@mailman.lug.org.uk">lugmaster@mailman.lug.org.uk</a><br>
<a class="moz-txt-link-freetext" href="https://mailman.lug.org.uk/mailman/listinfo/lugmaster">https://mailman.lug.org.uk/mailman/listinfo/lugmaster</a><br>
<br>
<br>
<br>
-----BEGIN PGP SIGNATURE----- <br>
Version: GnuPG v2 <br>
Comment: Using GnuPG with Thunderbird - <a class="moz-txt-link-freetext" href="http://www.enigmail.net/">http://www.enigmail.net/</a> <br>
<br>
iEYEARECAAYFAlQkEokACgkQJx75J9BaYOoiyACdE9t+kpjANsY4x1mRRCqRG7RF <br>
xH8AnR5WBB5C8OtTO0D/aY4IoVQXl4Z+ <br>
=Fa4b <br>
-----END PGP SIGNATURE----- <br>
<br>
</body>
</html>