[Spce-user] Vulnerability Report CVE-2014-7169

[Daniel Grotti]

Hi All,

As reported yesterday from the Debian Security Advisory a vulnerability
affecting the debian 'bash' package has been discovered.
Since all the Sipwise platform are based on Debian operating system, we
recommend to update the "bash" package on your Sipwise servers.

Affected systems: All NGCP systems

For Servers running SPCE < v2.8 before upgrade the package just run the
following command:

# echo 'deb http://debian.sipwise.com/debian/ squeeze-lts main contrib
non-free' >> /etc/apt/sources.list.d/debian.list

After the upgrade, you can remove it.

If you have questions, please don't hesitate to contact us any time via
the mailing list.
Please check the the link below for additional information:

https://www.debian.org/security/2014/dsa-3035



Regards,

Daniel



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sipwise.com/mailman/private/spce-user_lists.sipwise.com/attachments/20140926/d22b1325/attachment.html>