Online Update Question

I was wondering if it is OK to do an OnLine Update and installing any available patches on my SLES SP3 server with GroupWise 2012?
I was reading this Bash vulnerability and started getting worried,
and then wondered if Updates would address this vulnerability.
Anyone up to date on this issue and is it covered in patches from Online Updates?


>>>>>

New 'Bash' software bug may pose bigger threat than 'Heartbleed' http://a.msn.com/01/en-us/BB5AiOm

>>>>>
Parents
  • dkamp;2334514 wrote:
    I was wondering if it is OK to do an OnLine Update and installing any available patches on my SLES SP3 server with GroupWise 2012?
    I was reading this Bash vulnerability and started getting worried,
    and then wondered if Updates would address this vulnerability.
    Anyone up to date on this issue and is it covered in patches from Online Updates?


    >>>>>

    New 'Bash' software bug may pose bigger threat than 'Heartbleed' http://a.msn.com/01/en-us/BB5AiOm

    >>>>>



    I applied all updates to two SLES servers (no OES) this morning without an issue. You should be fine and I'd definitely recommend getting the bash patches on there, especially if you have servers facing the internet side with Web(Access) services.
  • On advise from a Linux person this is the procedure we used for our GroupWise and Data Synchronizer servers.
    Hope it helps someone else.

    rpm -qa | grep -E "bash|readline|openssl|http" | sort
    suse_register -d 2 -L /root/.suse_register.log
    zypper refresh -s
    zypper repos
    zypper -n -q lu 2>
  • dkamp;2334851 wrote:
    On advise from a Linux person this is the procedure we used for our GroupWise and Data Synchronizer servers.


    Interesting way to patch :) I'm curious, why not apply all patches for SLES, and just apply those selective patches? I'd opt for keeping the system as updated as possible for all packages that are running on it.

    Cheers,
    Willem
  • dkamp;2334851 wrote:
    On advise from a Linux person this is the procedure we used for our GroupWise and Data Synchronizer servers.


    Interesting way to patch :) I'm curious, why not apply all patches for SLES, and just apply those selective patches? I'd opt for keeping the system as updated as possible for all packages that are running on it.

    Cheers,
    Willem
Reply
  • dkamp;2334851 wrote:
    On advise from a Linux person this is the procedure we used for our GroupWise and Data Synchronizer servers.


    Interesting way to patch :) I'm curious, why not apply all patches for SLES, and just apply those selective patches? I'd opt for keeping the system as updated as possible for all packages that are running on it.

    Cheers,
    Willem
Children
No Data