<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">This should fix your update…<div><a href="http://docs.allstarlink.org/drupal/node/111">http://docs.allstarlink.org/drupal/node/111</a><br><div>
<span class="Apple-style-span" style="border-collapse: separate; font-family: Verdana; border-spacing: 0px;"><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Verdana; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">--<br>Tim<br>:wq</div></span></span>
</div>
<br><div><div>On Sep 25, 2014, at 1:02 PM, Bob <kk6ecm@gmail.com> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div lang="EN-US" link="blue" vlink="blue" style="font-family: Helvetica; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><div class="Section1" style="page: Section1;"><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="2" color="navy" face="Arial"><span style="font-size: 10pt; font-family: Arial; color: navy;">I performed the yum update... killed asterisk... lots of errors, repeater down. looks like I should have just updated bash (sigh!) need to rebuild ACID unless there is a way to “undo” the yum update. (sigh!)<o:p></o:p></span></font></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="2" color="navy" face="Arial"><span style="font-size: 10pt; font-family: Arial; color: navy;"> </span></font></div><div><div class="MsoNormal" align="center" style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; text-align: center;"><font size="3" face="Times New Roman"><span style="font-size: 12pt;"><hr size="2" width="100%" align="center" tabindex="-1"></span></font></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><b><font size="2" face="Tahoma"><span style="font-size: 10pt; font-family: Tahoma; font-weight: bold;">From:</span></font></b><font size="2" face="Tahoma"><span style="font-size: 10pt; font-family: Tahoma;"><span class="Apple-converted-space"> </span>app_rpt-users-bounces@ohnosec.org [mailto:app_rpt-users-bounces@ohnosec.org]<span class="Apple-converted-space"> </span><b><span style="font-weight: bold;">On Behalf Of<span class="Apple-converted-space"> </span></span></b>Doug Crompton<br><b><span style="font-weight: bold;">Sent:</span></b><span class="Apple-converted-space"> </span>Thursday, September 25, 2014 11:38 AM<br><b><span style="font-weight: bold;">To:</span></b><span class="Apple-converted-space"> </span>app_rpt-users@ohnosec.org<br><b><span style="font-weight: bold;">Subject:</span></b><span class="Apple-converted-space"> </span>Re: [App_rpt-users] NEW Security Issues</span></font><o:p></o:p></div></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="3" face="Times New Roman"><span style="font-size: 12pt;"> </span></font></div><div><p class="MsoNormal" style="margin: 0in 0in 12pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="3" face="Tahoma"><span style="font-size: 12pt; font-family: Tahoma;">Sorry I did not qualify that. The way to update centos is<span class="Apple-converted-space"> </span><br><br>yum update bash<br><br>The current update is:<br><br>Updated:<br> bash.i386 0:3.2-33.el5.1<br><br>This should not require any recompiles. If you have any current bash jobs running you would have to stop and restart them to use the new code or just reboot.<br id="FontBreak"></span></font><font face="Calibri"><br></font><b><font size="5" face="Calibri"><span style="font-size: 16pt; font-family: Calibri; font-weight: bold;">73 Doug<br>WA3DSP<br>http://www.crompton.com/hamradio</span></font></b><font size="5" face="Calibri"><span style="font-size: 16pt; font-family: Calibri;"><br><br></span></font><font face="Calibri"><o:p></o:p></font></p><div><div class="MsoNormal" align="center" style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; text-align: center;"><font size="3" face="Calibri"><span style="font-size: 12pt; font-family: Calibri;"><hr size="2" width="100%" align="center" id="stopSpelling"></span></font></div><p class="MsoNormal" style="margin: 0in 0in 12pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="3" face="Calibri"><span style="font-size: 12pt; font-family: Calibri;">From: doug@crompton.com<br>To: mike@midnighteng.com<br>Date: Thu, 25 Sep 2014 12:27:42 -0400<br>CC: app_rpt-users@ohnosec.org<br>Subject: Re: [App_rpt-users] NEW Security Issues<o:p></o:p></span></font></p><div><p class="MsoNormal" style="margin: 0in 0in 12pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="3" face="Tahoma"><span style="font-size: 12pt; font-family: Tahoma;">Information on Centos Bash update -<br><br><a href="http://centosnow.blogspot.com/2014/09/critical-bash-updates-for-centos-5.html" target="_blank" style="color: blue; text-decoration: underline;">http://centosnow.blogspot.com/2014/09/critical-bash-updates-for-centos-5.html</a><br><br id="ecxFontBreak"></span></font><b><font size="5" face="Calibri"><span style="font-size: 16pt; font-family: Calibri; font-weight: bold;">73 Doug<br>WA3DSP<br>http://www.crompton.com/hamradio</span></font></b><font size="5" face="Calibri"><span style="font-size: 16pt; font-family: Calibri;"><br><br></span></font><font face="Calibri"><o:p></o:p></font></p><div><div class="MsoNormal" align="center" style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; text-align: center;"><font size="3" face="Calibri"><span style="font-size: 12pt; font-family: Calibri;"><hr size="2" width="100%" align="center" id="ecxstopSpelling"></span></font></div><p class="MsoNormal" style="margin: 0in 0in 12pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="3" face="Calibri"><span style="font-size: 12pt; font-family: Calibri;">From: mike@midnighteng.com<br>To: app_rpt-users@ohnosec.org<br>Date: Thu, 25 Sep 2014 08:06:13 -0700<br>Subject: [App_rpt-users] NEW Security Issues</span></font><font size="2" face="Verdana"><span style="font-size: 10pt; font-family: Verdana;"><o:p></o:p></span></font></p><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="2" face="Verdana"><span style="font-size: 10pt; font-family: Verdana;"> </span></font></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="2" face="Verdana"><span style="font-size: 10pt; font-family: Verdana;">The increase in recent hack attempts are the result of the resent knowlage of a fundamental bug in bash.<o:p></o:p></span></font></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="2" face="Verdana"><span style="font-size: 10pt; font-family: Verdana;">It was not a big deal till someone published the flaw before some patches could be issued.<o:p></o:p></span></font></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="2" face="Verdana"><span style="font-size: 10pt; font-family: Verdana;"> </span></font></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="2" face="Verdana"><span style="font-size: 10pt; font-family: Verdana;">Some folks set-ups are vulnerable. If you run HTTP, you certainly are.<o:p></o:p></span></font></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="2" face="Verdana"><span style="font-size: 10pt; font-family: Verdana;"> </span></font></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="2" face="Verdana"><span style="font-size: 10pt; font-family: Verdana;">Just a FYI...<o:p></o:p></span></font></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="2" face="Verdana"><span style="font-size: 10pt; font-family: Verdana;"> </span></font></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="2" face="Verdana"><span style="font-size: 10pt; font-family: Verdana;">SHELLSHOCK - this is bigger and older than heartbleed.<o:p></o:p></span></font></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="2" face="Verdana"><span style="font-size: 10pt; font-family: Verdana;"> </span></font></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="2" face="Verdana"><span style="font-size: 10pt; font-family: Verdana;">It is a very big deal for "all" linux systems running http.<o:p></o:p></span></font></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="2" face="Verdana"><span style="font-size: 10pt; font-family: Verdana;"> </span></font></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="2" face="Verdana"><span style="font-size: 10pt; font-family: Verdana;"><a href="http://seclists.org/oss-sec/2014/q3/650" target="_blank" style="color: blue; text-decoration: underline;">http://seclists.org/oss-sec/2014/q3/650</a> <o:p></o:p></span></font></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="2" face="Verdana"><span style="font-size: 10pt; font-family: Verdana;"> </span></font></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="2" face="Verdana"><span style="font-size: 10pt; font-family: Verdana;">to check your version of bash, type<o:p></o:p></span></font></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="2" face="Verdana"><span style="font-size: 10pt; font-family: Verdana;"> </span></font></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="2" face="Verdana"><span style="font-size: 10pt; font-family: Verdana;">cd /bin<o:p></o:p></span></font></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="2" face="Verdana"><span style="font-size: 10pt; font-family: Verdana;">bash --version<o:p></o:p></span></font></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="2" face="Verdana"><span style="font-size: 10pt; font-family: Verdana;"> </span></font></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="2" face="Verdana"><span style="font-size: 10pt; font-family: Verdana;">our acid installs should be at 3.2<o:p></o:p></span></font></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="2" face="Verdana"><span style="font-size: 10pt; font-family: Verdana;">Remote ssh devices are possibly at risk.<o:p></o:p></span></font></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="2" face="Verdana"><span style="font-size: 10pt; font-family: Verdana;">Current patches may not be entirely effective.<o:p></o:p></span></font></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="2" face="Verdana"><span style="font-size: 10pt; font-family: Verdana;">Much more to be known about this.<o:p></o:p></span></font></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="2" face="Verdana"><span style="font-size: 10pt; font-family: Verdana;"> </span></font></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="2" face="Verdana"><span style="font-size: 10pt; font-family: Verdana;">google shellshock for more info.<o:p></o:p></span></font></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="2" face="Verdana"><span style="font-size: 10pt; font-family: Verdana;"> </span></font></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="2" face="Verdana"><span style="font-size: 10pt; font-family: Verdana;">...mike/kb8jnm<o:p></o:p></span></font></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="2" face="Verdana"><span style="font-size: 10pt; font-family: Verdana;"> </span></font></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="2" face="Verdana"><span style="font-size: 10pt; font-family: Verdana;"> </span></font></div></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="3" face="Calibri"><span style="font-size: 12pt; font-family: Calibri;"><br>_______________________________________________ App_rpt-users mailing list App_rpt-users@ohnosec.org http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users To unsubscribe from this list please visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button" You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.<o:p></o:p></span></font></div></div></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman';"><font size="3" face="Calibri"><span style="font-size: 12pt; font-family: Calibri;"><br>_______________________________________________ App_rpt-users mailing list App_rpt-users@ohnosec.org http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users To unsubscribe from this list please visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button" You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.<o:p></o:p></span></font></div></div></div></div>_______________________________________________<br>App_rpt-users mailing list<br>App_rpt-users@ohnosec.org<br>http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users<br><br>To unsubscribe from this list please visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button"<br>You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.</div></blockquote></div><br></div></body></html>