[Live-demo] reporting shellShock bug in OSgeo Live

["Dr. Ing. Carlos López"]

Hello:
I have just downloaded and deployed version 8.0 of the distro (without 
problems) in a production environment. Afterwards, TI guys performed 
some security checks and announced that the distro is vulnerable to the 
shellShock bug (see http://shellshocker.net). It appears to be a major 
issue related with bash, which has been around before 1994(!). They 
decided to shutdown the installation.
This should be a bug report, but I found no other way to report it. I 
would like to know if some actions could be taken to solve it.
Regards
Carlos
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/osgeolive/attachments/20141120/8518a413/attachment.html>