[CentOS-devel] Critical update for bash was released today.

Maybe wait til the update has propagated to the mirrors.  I just did a
yum update, and bash wasn't in the list of updates.

[mattrose at tankhouse nchaos]$ rpm -q bash
bash-4.2.45-5.el7.x86_64
[mattrose at tankhouse nchaos]$ sudo yum update
[sudo] password for mattrose: 
Loaded plugins: fastestmirror, langpacks
Loading mirror speeds from cached hostfile
 * base: less.cogeco.net
 * extras: less.cogeco.net
 * updates: centos.mirror.rafal.ca
No packages marked for update

Is there anyway of pushing this (and other critical) updates more
quickly?

Matt

On Wed, 2014-09-24 at 10:33 -0500, Jim Perrin wrote:
> You should 'yum update' as soon as possible to resolve this issue.
> 
> 
> Here's why you should care:
> 
> https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/
> 
> 
> Links to the centos updates:
> 
> CentOS-5:
> http://lists.centos.org/pipermail/centos-announce/2014-September/020582.html
> 
> CentOS-6:
> http://lists.centos.org/pipermail/centos-announce/2014-September/020585.html
> 
> CentOS-7:
> http://lists.centos.org/pipermail/centos-announce/2014-September/020583.html
> 
>