Please guys,
If everybody could patch their perfsonar boxen against shellshock LIKE
RIGHT NOW, or preferably LAST WEEK, or alternatively put the machines
out of their misery with a shotgun, that would be great.
Thank you,
"perfSONAR is recommending that all users run yum update to download the
latest packages from the CentOS repositories"
This will need to be done again in a couple of weeks, when a "better"
patch becomes available from the FSF or wherever.
By the way, the history of the development of bash is mildly
interesting. http://www.wired.com/2014/09/shellshocked-bash/
Proper operation of a host requires automated updating (yum-updatesd, yum-cron) to pick up these packages.
Those who are paranoid or afraid of damage from automatic updates should exclude packages that require specific
versions.
- Jared