Shellshock: Bash code injection vulnerability
We would like to inform you about a major vulnerability detected in Bash (Linux/Unix shell interpreter)
Vulnerability is described in CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187 security bulletins and known as Shellshock in media.
More information is available at Red Hat website https://access.redhat.com/articles/1200223
You can use following online service https://shellshocker.net/ to check your website against Shellshock vulnerability.
This bug affects all Linux versions running ‘bash – GNU Bourne Again SHell’, including:
- Ubuntu 10.04 LTS
- Ubuntu 12.04 LTS
- Ubuntu 14.04 LTS
- CentOS-4
- CentOS-5
- CentOS-6
- Debian 6
- Debian 7
Many distributions like CentOS, Debian and Ubuntu have already pushed updates for Bash.
We urgently recommend to install update for your OS as soon as possible.
To install all updates for your OS please use following commands
Debian and Ubuntu:
apt-get update && apt-get upgrade
CentOS:
yum clean all && yum update
If you want to update only bash use following commands
Debian and Ubuntu:
apt-get update && apt-get install --only-upgrade bash
CentOS:
yum clean all && yum update bash
If you need further assistance, please open a ticket via Support Center.