Linux vendors have been scrambling to patch the now-famous <a title="Wikipedia: Shellshock (software bug)" href="http://en singulair dosage.wikipedia.org/wiki/Shellshock_%28software_bug%29″ target=”_blank”>Shellshock bash vulnerability since it came to light late last month. However, most vendors have no real idea how many of their older distributions are still in production, and still in need of security fixes.
If you have any older CentOS systems (3.9 or 4.8/4.9, the final releases of each of those versions), it might be a good idea to check out Lewis’ binary rpm releases of patched bash 2.05b (for CentOS 3.9) and/or 3.0 (for CentOS 4.8), available from the Rosenthal & Rosenthal FTP server.
More news may be found on Lewis’ blog, here.