0

CVE-2014-6271 & CVE-2014-7169 is a bash related bug that reported at 24-Sep-2014. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6271 https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/

I'm using openSUSE 11.0 (bash version: bash-3.2-112.1) and asked to patch for CVE-2014-6271 & CVE-2014-7169, I tried YaST however it didn't work. I would like to ask any rpm could help to patch this bug?

I have tried yum update on CentOS 6.4 too, but after update the bug still exist, is there any official announce for CentOS 6.4 patch?

Thanks.

Improve this question
0

2 Answers 2

Reset to default
5

OpenSUSE 11.0 is out of support for 4 years. Update this thing to a supported OS.

Improve this answer
0
2

As SvW already covered the SuSE part, here is the answer for CentOS:
Only the latest CentOS minor versions get patches -- as always.
Update to CentOS 6.5. There won't be patches for 6.4.

Patches for CentOS 6.5 are already released.

Improve this answer
2
  • The CentOS 6.5 rpm works fine on CentOS 6.4 though
    – Dennis Kaarsemaker
    Sep 26, 2014 at 11:39
  • Thanks! Can I update from 6.4 to 6.5 using yum?
    – khui
    Sep 29, 2014 at 7:30

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .