Skip to Content.
Sympa Menu

perfsonar-announce - New LiveCD with bash fixes

Subject: perfSONAR Announcements

List archive

New LiveCD with bash fixes

Chronological Thread 
  • From: Andrew Lake <>
  • To: perfsonar-user <>, perfsonar-announce <>
  • Cc: "" <>
  • Subject: New LiveCD with bash fixes
  • Date: Thu, 25 Sep 2014 09:06:48 -0400

Hi all,

Yesterday CentOS announced a critical bash vulnerability (see Jason's note that was sent to the perfSONAR lists copied below). We now have new LiveCDs and LiveUSBs available for users of those installation types at

As Jason noted yesterday, users of the NetInstall can simply run 'yum update' to get the new fixes. Also, since we almost always get asked in situations like this, if you are planning to do a new NetInstall but notice that the NetInstall ISO was not updated, that is because it will grab the latest packages at install time automatically. In other words, it will just work and you will get all the latest stuff, no new ISO required. Please let us know if you have any questions.

Thank you,

Begin forwarded message:

From: Jason Zurawski <>
Subject: [perfSONAR-developer] Fwd: [CentOS-announce] CESA-2014:1293 Critical CentOS 6 bash Security Update
Date: September 24, 2014 6:46:09 PM EDT
To: "" <>, perfsonar-announce <>
Cc: "" <>
Reply-To: "" <>


Please see below for an announcement from the CentOS project regarding a critical security update to the bash application.  Additional information on the vulnerability can be found at the following URLs:

perfSONAR netinstall users are encouraged to run 'yum update' immediately, and pull down the patched version of this package.  This will come from CentOS directly.  

The perfSONAR team is currently rebuilding the LiveCD product for version 3.3, and will announce to these lists when it is available. Concerned parties can power down their LiveCDs for the time being.  

Please relay any questions or concerns regarding this announcement to the developers:



Begin forwarded message:

From: Johnny Hughes <>
Subject: [CentOS-announce] CESA-2014:1293 Critical CentOS 6 bash Security Update
Date: September 24, 2014 9:10:11 AM MDT

CentOS Errata and Security Advisory 2014:1293 Critical

Upstream details at :

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( sha256sum Filename ) 

f17f9e203cc55846a050ce57efd67159e208ef8bd469633a471233e8b9c54a74  bash-4.1.2-15.el6_5.1.i686.rpm
11628832fb279e1bdca2cb8f403f7080fbab9fde554ed6ce3081344f92a93d7a  bash-doc-4.1.2-15.el6_5.1.i686.rpm

eb8e41a4752e64c5c64371e5ae2ddbd5857b1e879832557a89fad195f4ab8f5b  bash-4.1.2-15.el6_5.1.x86_64.rpm
16312fa5b190cd20b8ce2374e8ea2404aa17c849003dd080105e6225fc379df1  bash-doc-4.1.2-15.el6_5.1.x86_64.rpm

063b6c42042d97a7aa32f8d058947275085a95a1545d1fe018bdc888e4dc093f  bash-4.1.2-15.el6_5.1.src.rpm

Johnny Hughes
CentOS Project { }
irc: hughesjr, #

CentOS-announce mailing list

Archive powered by MHonArc 2.6.16.

Top of Page