Perfsonar and shellshock

Jared Mauch jared at
Mon Sep 29 14:38:57 UTC 2014

> On Sep 29, 2014, at 8:55 AM, Stephen Satchell <list at> wrote:
> On 09/29/2014 05:23 AM, Leif Nixon wrote:
>> Please guys,
>> If everybody could patch their perfsonar boxen against shellshock LIKE
>> RIGHT NOW, or preferably LAST WEEK, or alternatively put the machines
>> out of their misery with a shotgun, that would be great.
>> Thank you,
>> From the perfSonar site:
> "perfSONAR is recommending that all users run yum update to download the
> latest packages from the CentOS repositories"
> This will need to be done again in a couple of weeks, when a "better"
> patch becomes available from the FSF or wherever.
> By the way, the history of the development of bash is mildly
> interesting.

Proper operation of a host requires automated updating (yum-updatesd, yum-cron) to pick up these packages.

Those who are paranoid or afraid of damage from automatic updates should exclude packages that require specific

- Jared

More information about the NANOG mailing list