[Triumf-linux-managers] ShellShock, bash really fixed this time

[Kelvin Raywood]

On Wednesday, managers of Linux machines were advised to update bash 
because of a vulnerability that has been dubbed shellshock. Since then, 
it has been discovered that the updated bash did not completely fix the 
problem.  A new update has been released and is on the TRIUMF mirror of 
ScientificLinux.

TRIUMF Computing recommends that you update bash on all Linux machines 
that you manage. The procedure for SL 5 and 6 is:

       yum clean metadata
       yum update bash

If you manage one or more Linux machines that use a different 
distribution, then follow the recommendations of the distributor.

For more info see:

       https://access.redhat.com/articles/1200223

This is the same link that was posted on Wednesday. RedHat have updated 
the contents which includes:

* instructions for testing if your bash is vulnerable
* a table of version numbers of the fixed packages
* common configuration examples of possibly vulnerable services
* an FAQ
* other relevant links

--
Andrew Daviel (Network Security Officer)
Denice Deatrich (Tier-1 Centre)
Kel Raywood (CCN)