Re: URGENT! Shellshock fix DOES NOT fix the bug on CentOS 5.4

[m.roth@xxxxxxxxx]

Jessica Blank wrote:
> Good afternoon!
>
> After applying the latest bash RPM listed at
> http://lists.centos.org/pipermail/centos-announce/2014-September/020594.html
> :
> The fixed RPM (bash-3.2-33.el5_10.4.x86_64.rpm) DOES work just fine on
> CentOS 5.10. However, it DOES NOT work on CentOS 5.4. That is, bash runs
> fine, but IS STILL VULNERABLE TO SHELLSHOCK!
>
> Scary screenie at: http://i.imgur.com/yR7sBjV.png
>
> It looks like the released RPM somehow behaves DIFFERENTLY on 5.4 as
> opposed to 5.10.
>
> This has been validated by one of my coworkers; it's apparently not just
> me.

Please note that the rpm is only for 5.10. You need to look around to see
if there *is* an update for 5.4....

    mark

_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos