<div dir="ltr"><div><div><div><a href="https://access.redhat.com/node/1200223">https://access.redhat.com/node/1200223</a><br><br></div>RHEL and CentOS have complete patches now available in yum for all platforms except RHEL 4. Both CVE-2014-6271 and CVE-2014-7169 are fixed in RHEL5, 6 and 7. RHEL 4 is patched for CVE-2014-6271.<br><br></div>The second patch changed the way bash handles environment variables that's transparent to the calling functions.<br><br></div>Also a nice writeup of how selinux interacts with shellshock bug on a CGI script written in bash is here:<br><a href="http://danwalsh.livejournal.com/71122.html">http://danwalsh.livejournal.com/71122.html</a><br></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Sep 24, 2014 at 2:41 PM, Jim Kinney <span dir="ltr"><<a href="mailto:jim.kinney@gmail.com" target="_blank">jim.kinney@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><a href="http://seclists.org/oss-sec/2014/q3/650" target="_blank">http://seclists.org/oss-sec/2014/q3/650</a><br><br></div>nasty and remote accessible.<span class="HOEnZb"><font color="#888888"><br clear="all"><div><br>-- <br><div dir="ltr">-- <br>James P. Kinney III<br><i><i><i><i><br></i></i></i></i>Every time you stop a school, you will have to build a jail. What you
gain at one end you lose at the other. It's like feeding a dog on his
own tail. It won't fatten the dog.<br>
- Speech 11/23/1900 Mark Twain<br><i><i><i><i><br><a href="http://heretothereideas.blogspot.com/" target="_blank">http://heretothereideas.blogspot.com/</a><br></i></i></i></i></div>
</div></font></span></div>
</blockquote></div><br><br clear="all"><br>-- <br><div dir="ltr">-- <br>James P. Kinney III<br><i><i><i><i><br></i></i></i></i>Every time you stop a school, you will have to build a jail. What you
gain at one end you lose at the other. It's like feeding a dog on his
own tail. It won't fatten the dog.<br>
- Speech 11/23/1900 Mark Twain<br><i><i><i><i><br><a href="http://heretothereideas.blogspot.com/" target="_blank">http://heretothereideas.blogspot.com/</a><br></i></i></i></i></div>
</div>