News for hackers. Stuff that matters.

A comment on CVE-2014-6271: Remote code execution through bash. Parent comment

Re:CVE-2014-6271: Remote code execution through bash by rbliss on Wednesday September 24, 2014 @06:16PM (#8364487)
Still waiting for a fix on Beanstalk. Neither "yum clean all" followed by "yum update bash" nor "yum --releasever=2014.09 update bash" currently work.

EDIT: relevant AWS threads

https://forums.aws.amazon.com/thread.jspa?threadID=161489

https://forums.aws.amazon.com/thread.jspa?threadID=161529&ts...

[ Parent | on HN ]
Re:CVE-2014-6271: Remote code execution through bash by rbliss on Thursday September 25, 2014 @01:15AM (#8365751)
Should be fixed now:

To manually update EC2 instances managed by Elastic Beanstalk, you can run the following command:

For Amazon Linux 2013.09 "sudo yum install -y http://packages.us-east-1.amazonaws.com/2013.09/updates/556c...

For Amazon Linux 2014.03 "sudo yum install -y http://packages.us-east-1.amazonaws.com/2014.03/updates/e10f...

[ Parent | on HN ]