Remote Code Execution via BASH Vulnerability

[darkblueb]

thread is here:

​http://seclists.org/oss-sec/2014/q3/649

All public-facing OSGeo machines need to be checked for this

[wildintellect]

Fix should be applied to all machines:

sudo apt-get update
sudo apt-get install bash

install bash will upgrade the already installed bash, but not accidentally upgrade anything else that might not be ready for an upgrade.

[martin]

All done - except "tracsvn", which is still Debian 5 (Lenny).