This rather serious bug has come to light which affects =93bash=94 the omnipresent shell used on UNIX of all flavors including RedHat, CentOS, Ubuntu, Mac OS X, and others. The bash shell is most commonly known as the way we interact with the server through SSH or in the Terminal, but it is also used when Apache processes CGIs, in the SSHD process, and in a considerable number of other environments. Through Lasso it is used at least by many [os_process] users and by those using the [shell] tag.

https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/

There is a partial fix for bash available through most auto-update procedures (yum, apt-get, etc.) on Linux. Mac OS X has not yet been updated.

You should update all your web servers to the latest version of bash now and then again when a complete fix is announced.

[fletcher]

#############################################################
Attend the Lasso Developer Conference 2014!
October 1-3, 2014 at Treefrog HQ, Newmarket, Ontario, Canada
http://www.lassosoft.com/LDC-newmarket-2014

#############################################################

This message is sent to you because you are subscribed to
the mailing list Lasso Lasso@lists.lassosoft.com
Official list archives available at http://www.lassotalk.com
To unsubscribe, E-mail to: <Lasso-unsubscribe@lists.lassosoft.com>
Send administrative queries to <Lasso-request@lists.lassosoft.com>