[dundee] Critical Bash Vulnerability Found in *nix Systems

gordon dunlop zubenel at fedoraproject.org
Fri Sep 26 10:08:44 UTC 2014


On 25 September 2014 13:18, Nick Walker <tel0seh at googlemail.com> wrote:

> FYI those patches are incomplete. Check the red hat vuln entry for a
> temporary fix using LD_preload until the patch is updated.
>
>
They have now got another patch to rectify the incomplete patch.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-7169

It has gone upstream and packages have been built for Red Hat, CentOS &
Fedora systems and will be available shortly in the update channels. I
expect the same will occur for Debian & Ubuntu systems.

https://access.redhat.com/articles/1200223

-- 
Gordon
www.zubenel.org.uk
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.lug.org.uk/pipermail/dundee/attachments/20140926/4ca999a5/attachment-0001.html>


More information about the dundee mailing list