Bash bug blows open Linux systems to hackers....

[Amphibian]

Bash bug blows open Linux, OS X systems to hackers
CGI scripts to DHCP clients affected – patch Heartbleed-grade injection vuln NOW


Check out the following and look for the test script to enter to check your systems:

http://www.theregister.co.uk/2014/09/24 ... hell_vuln/



amphibian

 

[jgutierrez]

Thanks for the information, th bug has been fixed:
yum update bash

 

[morph123]

Hi,

I'm running Elastix 2.5 Beta 3 and I see that it is vulnerable:
[root@MKElastix ~]# env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
vulnerable
this is a test
[root@MKElastix ~]#

Can I use yum update bash to fix it?

 

[jgutierrez]

Sure, why not?

yum update bash

 

[morph123]

Sure, why not?

yum update bash

Well I'm asking because I'm afraid it might break something in my system

 

[jgutierrez]

Well, if you are afraid of performing an action, it is wise to have a virtual/physical test server.

 

[Amphibian]

Or, as always, make a backup of your system before you do the update. That way you can restore a backup if the update don't work.



amphibian

 

[milocheri]

Just update, everything will go ok, tested on Elastix 2.4, no problems

 

[danardf]

Hi

May be bring a feedback to bugs.elastix.org and post this issue in the security area or else.
In this case, Elastix team could apply this patch for the new update and or they could spread a security alert on Elastix website.

But, well done. :wink: