[Live-demo] reporting shellShock bug in OSgeo Live

["Dr. Ing. Carlos López"]

Matthias Streulens Geomajas wrote:

> It's also indeed true that the bash bug is in version 8.0 of the live dvd.
> As this is a packaged ISO, BEFORE the bash bug was detected.
>
> Best to do is a sudo apt-get update and sudo apt-get dist-upgrade 
> after installing the release as packages are not updated since release 
> of the live dvd.
> Note that the GIS installed packages also will be updated.

Thank you for the hint.
Regards
Carlos

>
> Kind regards,
> Matthias
>
> "Dr. Ing. Carlos López" schreef op 20/11/2014 om 12:24:
>
>> Hello:
>> I have just downloaded and deployed version 8.0 of the distro 
>> (without problems) in a production environment. Afterwards, TI guys 
>> performed some security checks and announced that the distro is 
>> vulnerable to the shellShock bug (see http://shellshocker.net). It 
>> appears to be a major issue related with bash, which has been around 
>> before 1994(!). They decided to shutdown the installation.
>> This should be a bug report, but I found no other way to report it. I 
>> would like to know if some actions could be taken to solve it.
>> Regards
>> Carlos
>>
>>
>>_______________________________________________
>>Live-demo mailing list
>>Live-demo at lists.osgeo.org
>>http://lists.osgeo.org/mailman/listinfo/live-demo
>>http://live.osgeo.org
>>http://wiki.osgeo.org/wiki/Live_GIS_Disc
>>
>
>------------------------------------------------------------------------
>
>_______________________________________________
>Live-demo mailing list
>Live-demo at lists.osgeo.org
>http://lists.osgeo.org/mailman/listinfo/live-demo
>http://live.osgeo.org
>http://wiki.osgeo.org/wiki/Live_GIS_Disc
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/live-demo/attachments/20141120/840ca516/attachment-0001.html>