Still waiting for a fix on Beanstalk. Neither "yum clean all" followed by "yum u... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		rbliss on Sept 24, 2014 \| parent \| context \| favorite \| on: CVE-2014-6271: Remote code execution through bash Still waiting for a fix on Beanstalk. Neither "yum clean all" followed by "yum update bash" nor "yum --releasever=2014.09 update bash" currently work. EDIT: relevant AWS threads https://forums.aws.amazon.com/thread.jspa?threadID=161489 https://forums.aws.amazon.com/thread.jspa?threadID=161529&ts...

rbliss on Sept 25, 2014 [–]

Should be fixed now:

To manually update EC2 instances managed by Elastic Beanstalk, you can run the following command:

For Amazon Linux 2013.09 "sudo yum install -y http://packages.us-east-1.amazonaws.com/2013.09/updates/556c...

For Amazon Linux 2014.03 "sudo yum install -y http://packages.us-east-1.amazonaws.com/2014.03/updates/e10f...

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact