[174752] in North American Network Operators' Group
Re: Perfsonar and shellshock
daemon@ATHENA.MIT.EDU (Stephen Satchell)
Mon Sep 29 08:55:31 2014
X-Original-To: nanog@nanog.org
Date: Mon, 29 Sep 2014 05:55:22 -0700
From: Stephen Satchell <list@satchell.net>
To: nanog@nanog.org
In-Reply-To: <87a95iy5ry.fsf@keb.lan>
Errors-To: nanog-bounces@nanog.org
On 09/29/2014 05:23 AM, Leif Nixon wrote:
> Please guys,
>
> If everybody could patch their perfsonar boxen against shellshock LIKE
> RIGHT NOW, or preferably LAST WEEK, or alternatively put the machines
> out of their misery with a shotgun, that would be great.
>
> Thank you,
>
From the perfSonar site:
"perfSONAR is recommending that all users run yum update to download the
latest packages from the CentOS repositories"
This will need to be done again in a couple of weeks, when a "better"
patch becomes available from the FSF or wherever.
By the way, the history of the development of bash is mildly
interesting. http://www.wired.com/2014/09/shellshocked-bash/