Whats the best way to upgrade bash on a xenserver host?

abefroman · 09-28-2014, 10:44 AM

Whats the best way to upgrade bash on a xenserver host?

Yum is not finding an update, and the bash version installed is vulnerable.

Code:

[root@xen ~]# cat /etc/redhat-release 
XenServer release 6.2.0-70446c (xenenterprise)
[root@xen ~]# rpm -qa |grep bash
bash-3.2-32.el5
[root@xen ~]# yum update bash
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
Setting up Update Process
No Packages marked for Update

unSpawn · 09-29-2014, 12:54 AM

bash-3.2-32.el5 was released in July 2011.
If you haven't kept up with Updates you may need to update the distribution first.

Code:

]$ awk '/release/ {print $3}' /etc/redhat-release
5.10

]$ rpm -q bash
bash-3.2-33.el5_10.4

]$ rpm -q --changelog bash | head -12
* Fri Sep 26 2014 Ondrej Oprala <ooprala@redhat.com> - 3.2-33.4
- CVE-2014-7169 - bypass patch bug
  Related: #1146321

* Fri Sep 26 2014 Ondrej Oprala <ooprala@redhat.com> - 3.2-33.3
- CVE-2014-7169 - proper 3.2 backport - courtesy of Florian Weimer
  Related: #1146321

* Fri Sep 26 2014 Ondrej Oprala <ooprala@redhat.com> - 3.2-33.2
- CVE-2014-7169
  Resolves: #1146321