PDA

View Full Version : Shellshock vulnerability


valdet
09-25-2014, 12:54 PM
A new, even more critical bug than Heartbleed was discovered last night.

It was dubbed Shellshock and deals with bash shell on all of Unix based systems running Linux distros and Mac.

http://www.reuters.com/article/2014/09/24/us-cybersecurity-bash-idUSKCN0HJ2FQ20140924

https://www.us-cert.gov/ncas/current-activity/2014/09/24/Bourne-Again-Shell-Bash-Remote-Code-Execution-Vulnerability

My installation is on RedHat distro and the instructions for patch are here
https://access.redhat.com/articles/1200223

Make sure to patch up your servers as soon as you can.


Thanks to a fellow security expert for the information this critical bug.