[174753] in North American Network Operators' Group
Re: Perfsonar and shellshock
daemon@ATHENA.MIT.EDU (Jared Mauch)
Mon Sep 29 10:39:09 2014
X-Original-To: nanog@nanog.org
From: Jared Mauch <jared@puck.nether.net>
In-Reply-To: <542956BA.4010704@satchell.net>
Date: Mon, 29 Sep 2014 10:38:57 -0400
To: Stephen Satchell <list@satchell.net>
Cc: nanog@nanog.org
Errors-To: nanog-bounces@nanog.org
> On Sep 29, 2014, at 8:55 AM, Stephen Satchell <list@satchell.net> =
wrote:
>=20
> On 09/29/2014 05:23 AM, Leif Nixon wrote:
>> Please guys,
>>=20
>> If everybody could patch their perfsonar boxen against shellshock =
LIKE
>> RIGHT NOW, or preferably LAST WEEK, or alternatively put the machines
>> out of their misery with a shotgun, that would be great.
>>=20
>> Thank you,
>>=20
>=20
>> =46rom the perfSonar site:
>=20
> "perfSONAR is recommending that all users run yum update to download =
the
> latest packages from the CentOS repositories"
>=20
> This will need to be done again in a couple of weeks, when a "better"
> patch becomes available from the FSF or wherever.
>=20
> By the way, the history of the development of bash is mildly
> interesting. http://www.wired.com/2014/09/shellshocked-bash/
Proper operation of a host requires automated updating (yum-updatesd, =
yum-cron) to pick up these packages.
Those who are paranoid or afraid of damage from automatic updates should =
exclude packages that require specific
versions.
- Jared=
