New Zeroshell 3.2.0 (please urgently upgrade)

Home Page Forums Network Management ZeroShell New Zeroshell 3.2.0 (please urgently upgrade)

  • This topic is empty.
Viewing 8 posts - 1 through 8 (of 8 total)
  • Author
    Posts
  • #44054
    imported_fulvio
    Participant

    Hi,

    the new release of Zeroshell is ready to be installed.

    It is strongly recommended to upgrade to this release because all the previous releases are vulnerable as a result of a bug in Bash (CVE-2014-7186 vulnerability ShellShock). By exploiting this vulnerability an unauthenticated user can execute arbitrary code via the web interface.

    Many other minor bugs have been fixed with this release.

    Regards
    Fulvio

    #53476
    Nick Shortal
    Member

    Hi Fulvio,

    Thank you for patching this so quickly, however when we try to install this patch, ZeroShell reports back that we do not have a subscription.

    We are currently trialling your product with a aim to put it into production, but may have to discontinue it’s use if we are unable to use it securely.

    #53477
    imported_fulvio
    Participant

    Hi,
    into download section you can get the Zeroshell 3.2.0 as iso or disk image and upgrade from there.
    Regards
    Fulvio

    #53478
    Nick Shortal
    Member

    Thank you.

    #53479
    reaperz
    Participant

    So if my web interface is not open to WAN, then there is no need to update?

    #53480
    garfield
    Participant

    Hi fulvio,
    i would like update my alix board from 2.0.RC2 to your new version 3.2.1.
    How can i do this ? All new existing images from 3.2.1 will be fail.

    PS: I have no problem to build approtiate kernel with given sources, if required.

    Best regards

    Gernot

    #53481
    maccowley
    Member

    I am running an Alix board with 3.2.1 without any problems.
    Could you explain what “will be fail” means?

    #53482
    garfield
    Participant

    @maccowley wrote:

    I am running an Alix board with 3.2.1 without any problems.
    Could you explain what “will be fail” means?

    It give no output on seriell console. In the meantime i have testet the version 3.3.2 (USB image).
    This works only with some modifications into grub.cfg. You must add the kernel parameter console=38400,n8.
    After this you get the kernel boot messages into seriell console from alix 2d3 board.

    Following steps are to do:

      1. write image to cf-card gunzip -c imagefile.gz > /dev/
      2. mount first partition from cf-card (writable) on your local pc
      3. edit /grub/grub.cfg
      4. add linux kernel parameter console=38400,n8 between root=… and quit kernel parameter.
      5. save the file, unmount and insert cf-card into alix board
Viewing 8 posts - 1 through 8 (of 8 total)
  • You must be logged in to reply to this topic.