Appliance update - critical bash vulnerability (Shellshock)

Post by **mark** » Fri Sep 26, 2014 10:21 am

Fixes bash environment injection vulnerability CVE-2014-7169 and other misc. CVE-2014-7186, CVE-2014-7187.

This includes yesterday's fix for CVE-2014-6271.

Everyone should install this. The exact version number will vary depending on the age of your base platform.

This update is available via the System -> System Setup -> Update Software menu. Or if you have old scripts it's under Maintenance -> Update software or for really old scripts Maintenance -> Check for updates.

Post by **mark** » Mon Sep 29, 2014 1:10 pm

This, and only this, update has now been made available to all search appliances, even those with expired maintenance contracts.

Post by **mark** » Wed Oct 01, 2014 2:40 pm

CVE-2014-6277 and CVE-2014-6278 are also covered by the above release.