Last week, the existence of a new software vulnerability that affects
Linux, UNIX and Mac OSX operating systems was revealed. Known as the
“Bash Bug” or “ShellShock,” the GNU Bash Remote Code Execution
Vulnerability (CVE-2014-6271 and CVE-2014-7169) allows attackers to gain
control over targeted computers through the Bash shell, potentially
giving them access to enterprise data and networks. NetIQ recommends
that customers using the SUSE operating system apply the relevant
patches as soon as possible using the information available in this
KnowledgeBase article:
https://www.novell.com/support/kb/doc.php?id=7015702

Several of NetIQ’s solutions include virtual appliances based on SUSE
Linux - *NetIQ Change Guardian*, NetIQ Sentinel, NetIQ Sentinel High
Availability, and NetIQ Sentinel Log Manager - and are potentially at
risk. For these virtual appliances, NetIQ has issued SUSE operating
system patches through the standard appliance update channels. These
patches are available immediately and include all SUSE security updates
available as of Sept. 29, 2014.

We are closely monitoring the SUSE response to these vulnerabilities to
determine whether additional urgent patches are needed.


--
CeeDubbVA
------------------------------------------------------------------------
CeeDubbVA's Profile: https://forums.netiq.com/member.php?userid=4538
View this thread: https://forums.netiq.com/showthread.php?t=51876