Better Shellshock Patches Available
Marc Maligalig | | Sep 27, 2014 11:07 PM EDT |
(Photo : Reuters Mal Langsdon)
While the first released patches for the Shellshock vulnerability didn't provide complete protection, the latest patch versions were released on Friday for Linux, Apple's OS X and Unix bash shell security problem, giving affected computers greater defenses against cyber threats.
The first patch's problem, according to software company Red Hat in its Shellshock FAQ, was that it just focused on the CVE-2014-6271, the original bash shell flaw. While it took care of the Shellshock, the worst bash security hole, it didn't address the other problems.
Like Us on Facebook
"Shortly after that issue went public a researcher found a similar flaw that wasn't blocked by the first fix and this was assigned CVE-2014-7169," said Red Hat.
Although it's not as bad as the other flaw, the CVE-2014-7169 was still a security problem
Florian Weimer, researcher at Red Hat Product Security, later found more issues and were designeted as CVE-2014-7186 and CVE-2014-7187. The new bugs, fortunately, are not as bad and the most recent patch solves these as well.
Red Hat's Huzaifa Sidhpurwala said that the latest version of bash answers all the CVE problems.
A security team from software firm discovered new vulnerabilities in Linux's Bash shell that could potentially cause an unintentional sharing of information with devices connected to it.
The Bash shell is one of the most widely used and versatile utilities in Linux and OS X.
When accessed properly, the Bash bug, also nicknamed Shellshock, lets a hacker's code to be run the moment the shell is invoked, leaving the system vulnerable to a wide variety of attacks. Patching every instance may be difficult for since the bug has been present in Linux for a long time.
Robert David Graham from Errata Security has compared Bash to the Heartbleed security bug discovered in April, since they both have wide and potential long-term effects on the security of computers.
TagsShellshocker, Shellshock, Bash Bug, Red Hat, CVE-2014-7149, CVE-2014-6271, CVE-20147186, CVE-2014-7187, linux, OS X, Heartbleed
©2015 Chinatopix All rights reserved. Do not reproduce without permission
EDITOR'S PICKS
-
Did the Trump administration just announce plans for a trade war with ‘hostile’ China and Russia?
-
US Senate passes Taiwan travel bill slammed by China
-
As Yan Sihong’s family grieves, here are other Chinese students who went missing abroad. Some have never been found
-
Beijing blasts Western critics who ‘smear China’ with the term sharp power
-
China Envoy Seeks to Defuse Tensions With U.S. as a Trade War Brews
-
Singapore's Deputy PM Provides Bitcoin Vote of Confidence Amid China's Blanket Bans
-
China warns investors over risks in overseas virtual currency trading
-
Chinese government most trustworthy: survey
-
Kashima Antlers On Course For Back-To-Back Titles
MOST POPULAR
LATEST NEWS
Zhou Yongkang: China's Former Security Chief Sentenced to Life in Prison
China's former Chief of the Ministry of Public Security, Zhou Yongkang, has been given a life sentence after he was found guilty of abusing his office, bribery and deliberately ... Full Article
TRENDING STORY
-
China Pork Prices Expected to Stabilize As The Supplies Recover
-
Elephone P9000 Smartphone is now on Sale on Amazon India
-
There's a Big Chance Cliffhangers Won't Still Be Resolved When Grey's Anatomy Season 13 Returns
-
Supreme Court Ruled on Samsung vs Apple Dispute for Patent Infringement
-
Microsoft Surface Pro 5 Rumors and Release Date: What is the Latest?