[opensuse] Bash Vulnerability - stupid question
Hi, OS 12.3 Do I have to keep an eye on updates of bash and readline or will they come in automatically with the updater-applet when ready? (As I haven’t noticed any related updates till yesterday I updated them with Yast, but as I read there is another problem yet to be solved and I'd like to know if I can simply forget it and leave it to the updater...) Thanks, Daniel -- Daniel Bauer photographer Basel Barcelona professional photography: http://www.daniel-bauer.com google+: https://plus.google.com/109534388657020287386 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On Fri, Sep 26, 2014 at 10:23:27AM +0200, Daniel Bauer wrote:
Hi,
OS 12.3
Do I have to keep an eye on updates of bash and readline or will they come in automatically with the updater-applet when ready?
(As I haven’t noticed any related updates till yesterday I updated them with Yast, but as I read there is another problem yet to be solved and I'd like to know if I can simply forget it and leave it to the updater...)
Just run "zypper patch" and install if there is any stuff to install. Check with rpm -q --changelog bash|head if the patch is in if you are worried. Ciao, Marcus -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Marcus Meissner wrote:
On Fri, Sep 26, 2014 at 10:23:27AM +0200, Daniel Bauer wrote:
Hi,
OS 12.3
Do I have to keep an eye on updates of bash and readline or will they come in automatically with the updater-applet when ready?
(As I haven’t noticed any related updates till yesterday I updated them with Yast, but as I read there is another problem yet to be solved and I'd like to know if I can simply forget it and leave it to the updater...) Just run "zypper patch" and install if there is any stuff to install.
Check with
rpm -q --changelog bash|head
if the patch is in if you are worried.
Ciao, Marcus In an article posted yesterday (Thursday Sep 25) on CBC.ca: Linux makers released patches to protect against attacks on Wednesday, though security researchers uncovered flaws in those updates, prompting No. 1 Linux maker Red Hat Inc to advise customers that the patch was "incomplete." http://www.cbc.ca/news/technology/shellshock-aka-bash-computer-bug-already-e...
Can you confirm whether or not the patched version on the update repo is "complete"? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On Fri, Sep 26, 2014 at 09:45:36AM -0600, Darryl Gregorash wrote:
Marcus Meissner wrote:
On Fri, Sep 26, 2014 at 10:23:27AM +0200, Daniel Bauer wrote:
Hi,
OS 12.3
Do I have to keep an eye on updates of bash and readline or will they come in automatically with the updater-applet when ready?
(As I haven’t noticed any related updates till yesterday I updated them with Yast, but as I read there is another problem yet to be solved and I'd like to know if I can simply forget it and leave it to the updater...) Just run "zypper patch" and install if there is any stuff to install.
Check with
rpm -q --changelog bash|head
if the patch is in if you are worried.
Ciao, Marcus In an article posted yesterday (Thursday Sep 25) on CBC.ca: Linux makers released patches to protect against attacks on Wednesday, though security researchers uncovered flaws in those updates, prompting No. 1 Linux maker Red Hat Inc to advise customers that the patch was "incomplete." http://www.cbc.ca/news/technology/shellshock-aka-bash-computer-bug-already-e...
Can you confirm whether or not the patched version on the update repo is "complete"?
it similar incomplete as redhats. For openSUSE I will be releasing incremental updates shortly. Ciao, Marcus -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
participants (3)
-
Daniel Bauer -
Darryl Gregorash -
Marcus Meissner