[Live-demo] reporting shellShock bug in OSgeo Live

[Angelos Tzotsos]

Hi Carlos,

Indeed the bug is still present in the final iso of version 8.0 (same 
applies for the upstream ubuntu installation iso), you need to update 
your installation.

The place to report bugs etc is: http://trac.osgeo.org/osgeo/report/10

Cheers,
Angelos

On 11/20/2014 01:37 PM, Matthias Streulens Geomajas wrote:
> It's also indeed true that the bash bug is in version 8.0 of the live 
> dvd.
> As this is a packaged ISO, BEFORE the bash bug was detected.
>
> Best to do is a sudo apt-get update and sudo apt-get dist-upgrade 
> after installing the release as packages are not updated since release 
> of the live dvd.
> Note that the GIS installed packages also will be updated.
>
> Kind regards,
> Matthias
>
> "Dr. Ing. Carlos López" schreef op 20/11/2014 om 12:24:
>> Hello:
>> I have just downloaded and deployed version 8.0 of the distro 
>> (without problems) in a production environment. Afterwards, TI guys 
>> performed some security checks and announced that the distro is 
>> vulnerable to the shellShock bug (see http://shellshocker.net). It 
>> appears to be a major issue related with bash, which has been around 
>> before 1994(!). They decided to shutdown the installation.
>> This should be a bug report, but I found no other way to report it. I 
>> would like to know if some actions could be taken to solve it.
>> Regards
>> Carlos
>>
>>
>> _______________________________________________
>> Live-demo mailing list
>> Live-demo at lists.osgeo.org
>> http://lists.osgeo.org/mailman/listinfo/live-demo
>> http://live.osgeo.org
>> http://wiki.osgeo.org/wiki/Live_GIS_Disc
>
>
>
>
> _______________________________________________
> Live-demo mailing list
> Live-demo at lists.osgeo.org
> http://lists.osgeo.org/mailman/listinfo/live-demo
> http://live.osgeo.org
> http://wiki.osgeo.org/wiki/Live_GIS_Disc


-- 
Angelos Tzotsos
Remote Sensing Laboratory
National Technical University of Athens
http://users.ntua.gr/tzotsos

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/osgeolive/attachments/20141120/c383b836/attachment.html>