Visitors

EMC UIM/O and UIM/P: Security Update for Multiple Vulnerabilities in Bash

EMC KB 193094 : ESA-2014-113: EMC Unified Infrastructure Manager Operations and Unified Infrastructure Manager Provisioning Security Update for Multiple Vulnerabilities in Bash
https://support.emc.com/kb/193094

Affected Products
EMC Software: EMC Unified Infrastructure Manager/Operations (UIMO) All versions
EMC Software: EMC Unified Infrastructure Manager/Provisioning (UIMP) All versions

Resolution
Remediate bash by following the steps below. These steps work the same for UIM/O and UIM/P.

Link To Remedies:
Registered EMC Online Support customers can download shell_shock_fix.zip from support.emc.com at: https://support.emc.com/downloads/28497_Unified-Infrastructure-Manager

  • Download shell_shock_fix.zip and copy it to the system to be updated
    Use WinSCP or similar product to upload to /tmp
  • Unzip shell_shock_fix.zip
    uim001:/tmp # unzip shell_shock_fix.zip
    Archive:  shell_shock_fix.zip
    creating: shell_shock/
    inflating: shell_shock/bash-3.2-147.22.1.x86_64.rpm
    inflating: shell_shock/shell-shock-vulnerability-fix.pl
    inflating: shell_shock/bash-doc-3.2-147.22.1.x86_64.rpm
    inflating: shell_shock/libreadline5-5.2-147.22.1.x86_64.rpm
    inflating: shell_shock/readline-doc-5.2-147.22.1.x86_64.rpm
  • Change directory to shell_shock
    uim001:/tmp # cd shell_shock/
    uim001:/tmp/shell_shock #
  • Run ./shell-shock-vulnerability-fix.pl
    uim001:/tmp/shell_shock # ./shell-shock-vulnerability-fix.pl
    This system is vulnerable to shell shock.
    Do you want to install the update? (y/n) y
    Preparing...             ########################################### [100%]
    1:libreadline5           ########################################### [ 25%]
    2:bash                   ########################################### [ 50%]
    3:bash-doc               ########################################### [ 75%]
    4:readline-doc           ########################################### [100%]
    Done

I hope this will help.

Leave a Reply

You can use these HTML tags

<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>