nanog mailing list archives
Re: Perfsonar and shellshock
From: Jared Mauch <jared () puck nether net>
Date: Mon, 29 Sep 2014 10:38:57 -0400
On Sep 29, 2014, at 8:55 AM, Stephen Satchell <list () satchell net> wrote: On 09/29/2014 05:23 AM, Leif Nixon wrote:Please guys, If everybody could patch their perfsonar boxen against shellshock LIKE RIGHT NOW, or preferably LAST WEEK, or alternatively put the machines out of their misery with a shotgun, that would be great. Thank you,From the perfSonar site:"perfSONAR is recommending that all users run yum update to download the latest packages from the CentOS repositories" This will need to be done again in a couple of weeks, when a "better" patch becomes available from the FSF or wherever. By the way, the history of the development of bash is mildly interesting. http://www.wired.com/2014/09/shellshocked-bash/
Proper operation of a host requires automated updating (yum-updatesd, yum-cron) to pick up these packages. Those who are paranoid or afraid of damage from automatic updates should exclude packages that require specific versions. - Jared
Current thread:
- Perfsonar and shellshock Leif Nixon (Sep 29)
- Re: Perfsonar and shellshock Stephen Satchell (Sep 29)
- Re: Perfsonar and shellshock Jared Mauch (Sep 29)
- Re: Perfsonar and shellshock Stephen Satchell (Sep 29)