<div dir="ltr">Looks like updates are there for CentOS <div><br></div><div><span class="Apple-style-span" style="color:rgb(0,0,0);font-family:Times;font-size:medium"><pre style="white-space:pre-wrap">You should 'yum update' as soon as possible to resolve this issue.
Here's why you should care:
<a href="https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/">https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/</a>
Links to the centos updates:
CentOS-5:
<a href="http://lists.centos.org/pipermail/centos-announce/2014-September/020582.html">http://lists.centos.org/pipermail/centos-announce/2014-September/020582.html</a>
CentOS-6:
<a href="http://lists.centos.org/pipermail/centos-announce/2014-September/020585.html">http://lists.centos.org/pipermail/centos-announce/2014-September/020585.html</a>
CentOS-7:
<a href="http://lists.centos.org/pipermail/centos-announce/2014-September/020583.html">http://lists.centos.org/pipermail/centos-announce/2014-September/020583.html</a>
</pre></span></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Sep 24, 2014 at 5:43 PM, Chuck Payne <span dir="ltr"><<a href="mailto:terrorpup@gmail.com" target="_blank">terrorpup@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">I was just abot to ask if there is a fix for CentOS6 as it there. <div><br></div><div><a href="https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/" target="_blank">https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/</a><br></div><div><br></div><div><div>env x='() { :;}; echo vulnerable' bash -c "echo this is a test"</div><div>vulnerable</div><div>this is a test</div></div><div><br></div></div><div class="gmail_extra"><div><div class="h5"><br><div class="gmail_quote">On Wed, Sep 24, 2014 at 5:37 PM, David Ritchie <span dir="ltr"><<a href="mailto:deritchie@gmail.com" target="_blank">deritchie@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><a href="https://access.redhat.com/articles/1200223?sc_cid=70160000000e8eaAAA&" target="_blank">https://access.redhat.com/articles/1200223?sc_cid=70160000000e8eaAAA&</a><br>
<br>
Also seen in Solaris - there is probably others...<br>
<br>
<br>
-- David<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="http://mail.ale.org/pipermail/ale/attachments/20140924/8fd72427/attachment.html" target="_blank">http://mail.ale.org/pipermail/ale/attachments/20140924/8fd72427/attachment.html</a>><br>
_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org" target="_blank">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
</blockquote></div><br><br clear="all"><div><br></div></div></div>-- <br><div dir="ltr">Terror PUP a.k.a<br>Chuck "PUP" Payne<br> <br><a href="tel:678%20636%209678" value="+16786369678" target="_blank">678 636 9678</a><br>-----------------------------------------<br>Discover it! Enjoy it! Share it! openSUSE Linux.<br>-----------------------------------------<br>openSUSE -- Terrorpup<br>openSUSE Ambassador/openSUSE Member<br>skype,twiiter,identica,friendfeed -- terrorpup<br>freenode(irc) --terrorpup/lupinstein<br>Register Linux Userid: 155363<br> <br>Have you tried SUSE Studio? Need to create a Live CD, an app you want to package and distribute , or create your own linux distro. Give SUSE Studio a try.<br><br></div>
</div>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div dir="ltr">Terror PUP a.k.a<br>Chuck "PUP" Payne<br> <br>678 636 9678<br>-----------------------------------------<br>Discover it! Enjoy it! Share it! openSUSE Linux.<br>-----------------------------------------<br>openSUSE -- Terrorpup<br>openSUSE Ambassador/openSUSE Member<br>skype,twiiter,identica,friendfeed -- terrorpup<br>freenode(irc) --terrorpup/lupinstein<br>Register Linux Userid: 155363<br> <br>Have you tried SUSE Studio? Need to create a Live CD, an app you want to package and distribute , or create your own linux distro. Give SUSE Studio a try.<br><br></div>
</div>