MANDRIVA : Shell Shock vulnerability, please update your Mandriva’s products

At the end of september, the Shell Shock vulnerability was discovered and has raised a strong concern from all IT security services. Indeed, the flaw in the Unix bash shell exposes the majority of computers running Linux.

To protect your assets from this threat, Mandriva's technical teams working on Pulse and MBS have published a patch.

We invite you to update your products, if you haven't done it yet.

If you are not covered by a support contract which allows you to obtain the required update of your product, don't worry, simply contact us by email : [e-mail] or by phone : [phone].

MBS

Please follow the instructions below for updating your MBS:

1. Open the following URL in your browser: https:///mmc (Replace with the IP address or name of your server).
2. Log on using "root" as username and the password that you defined.
3. On the dashboard in the "System updates" widget, click on "Update".

Pulse

Please follow the instructions below for updating your Pulse server:

1. Open the following URL in your browser: https:///mmc (Replace with the IP address or name of your server).
2. Log on using "root" as username and the password that you defined.
3. On the dashboard in the "Update" widget, click on "Update".

Please follow the instructions below for updating the Pulse agents on your Windows client machines :

1. Log on to Pulse server terminal with "root" as username and the password that you defined
2. Re-generate the agents :
cd /var/lib/pulse2/clients/win32/
./generate-agent-pack.sh -c
./generate-agent-pack.sh
3. Download Pulse secure agent from

https:///downloads/win32/pulse2-secure-agent-2.2.exe(Replace with the IP address or name of your server).
4. From Pulse packages module, create a new package containing that exe file. Pulse will create the proper command for its deployment.
5. Deploy the package to your Windows client machines.