www.zeroshell.org Forum Index www.zeroshell.org
Linux Distribution for server and embedded devices
 
 SearchSearch  RegisterRegister  UsergroupsUsergroups 
 ProfileProfile  Log inLog in  Log in to check your private messagesPrivate Message 

New Zeroshell 3.2.0 (please urgently upgrade)

 
Post new topic   Reply to topic    www.zeroshell.org Forum Index -> ZeroShell
View previous topic :: View next topic  
Author Message
fulvio
Site Admin


Joined: 01 Nov 2006
Posts: 1072

PostPosted: Mon Sep 29, 2014 10:02 pm    Post subject: New Zeroshell 3.2.0 (please urgently upgrade) Reply with quote

Hi,

the new release of Zeroshell is ready to be installed.

It is strongly recommended to upgrade to this release because all the previous releases are vulnerable as a result of a bug in Bash (CVE-2014-7186 vulnerability ShellShock). By exploiting this vulnerability an unauthenticated user can execute arbitrary code via the web interface.

Many other minor bugs have been fixed with this release.

Regards
Fulvio


Last edited by fulvio on Sun Jan 25, 2015 4:35 pm; edited 1 time in total
Back to top
View user's profile Send private message Send e-mail
Nick Shortal



Joined: 02 Oct 2014
Posts: 2

PostPosted: Thu Oct 02, 2014 1:48 am    Post subject: Can't update to 3.2.0 without a subscription Reply with quote

Hi Fulvio,

Thank you for patching this so quickly, however when we try to install this patch, ZeroShell reports back that we do not have a subscription.

We are currently trialling your product with a aim to put it into production, but may have to discontinue it's use if we are unable to use it securely.
Back to top
View user's profile Send private message
fulvio
Site Admin


Joined: 01 Nov 2006
Posts: 1072

PostPosted: Thu Oct 02, 2014 4:02 am    Post subject: Reply with quote

Hi,
into download section you can get the Zeroshell 3.2.0 as iso or disk image and upgrade from there.
Regards
Fulvio
Back to top
View user's profile Send private message Send e-mail
Nick Shortal



Joined: 02 Oct 2014
Posts: 2

PostPosted: Thu Oct 02, 2014 6:05 am    Post subject: Downloading 3.2.0 now Reply with quote

Thank you.
Back to top
View user's profile Send private message
reaperz



Joined: 13 Apr 2012
Posts: 93

PostPosted: Tue Oct 21, 2014 3:40 pm    Post subject: Reply with quote

So if my web interface is not open to WAN, then there is no need to update?
Back to top
View user's profile Send private message
garfield



Joined: 17 Jul 2011
Posts: 4

PostPosted: Mon Jan 12, 2015 10:34 pm    Post subject: Re: New Zeroshell 3.2.0 (please urgently upgrade) Reply with quote

Hi fulvio,
i would like update my alix board from 2.0.RC2 to your new version 3.2.1.
How can i do this ? All new existing images from 3.2.1 will be fail.

PS: I have no problem to build approtiate kernel with given sources, if required.

Best regards

Gernot
Back to top
View user's profile Send private message
maccowley



Joined: 06 Feb 2014
Posts: 17

PostPosted: Tue Feb 03, 2015 7:13 am    Post subject: Reply with quote

I am running an Alix board with 3.2.1 without any problems.
Could you explain what "will be fail" means?
Back to top
View user's profile Send private message
garfield



Joined: 17 Jul 2011
Posts: 4

PostPosted: Fri Feb 20, 2015 11:28 am    Post subject: Reply with quote

maccowley wrote:
I am running an Alix board with 3.2.1 without any problems.
Could you explain what "will be fail" means?

It give no output on seriell console. In the meantime i have testet the version 3.3.2 (USB image).
This works only with some modifications into grub.cfg. You must add the kernel parameter console=38400,n8.
After this you get the kernel boot messages into seriell console from alix 2d3 board.

Following steps are to do:

    1. write image to cf-card gunzip -c imagefile.gz > /dev/<your-cf-card-device>
    2. mount first partition from cf-card (writable) on your local pc
    3. edit <mountpoint>/grub/grub.cfg
    4. add linux kernel parameter console=38400,n8 between root=... and quit kernel parameter.
    5. save the file, unmount and insert cf-card into alix board
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    www.zeroshell.org Forum Index -> ZeroShell All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group