New Zeroshell 3.2.0 (please urgently upgrade)

Home Page Forums Network Management ZeroShell New Zeroshell 3.2.0 (please urgently upgrade)

This topic contains 6 replies, has 0 voices, and was last updated by  imported_fulvio 3 years, 12 months ago.

Viewing 8 posts - 1 through 8 (of 8 total)
  • Author
    Posts
  • #44054

    imported_fulvio
    Participant

    Hi,

    the new release of Zeroshell is ready to be installed.

    It is strongly recommended to upgrade to this release because all the previous releases are vulnerable as a result of a bug in Bash (CVE-2014-7186 vulnerability ShellShock). By exploiting this vulnerability an unauthenticated user can execute arbitrary code via the web interface.

    Many other minor bugs have been fixed with this release.

    Regards
    Fulvio

    #53476

    Nick Shortal
    Member

    Hi Fulvio,

    Thank you for patching this so quickly, however when we try to install this patch, ZeroShell reports back that we do not have a subscription.

    We are currently trialling your product with a aim to put it into production, but may have to discontinue it’s use if we are unable to use it securely.

    #53477

    imported_fulvio
    Participant

    Hi,
    into download section you can get the Zeroshell 3.2.0 as iso or disk image and upgrade from there.
    Regards
    Fulvio

    #53478

    Nick Shortal
    Member

    Thank you.

    #53479

    reaperz
    Member

    So if my web interface is not open to WAN, then there is no need to update?

    #53480

    garfield
    Participant

    Hi fulvio,
    i would like update my alix board from 2.0.RC2 to your new version 3.2.1.
    How can i do this ? All new existing images from 3.2.1 will be fail.

    PS: I have no problem to build approtiate kernel with given sources, if required.

    Best regards

    Gernot

    #53481

    maccowley
    Member

    I am running an Alix board with 3.2.1 without any problems.
    Could you explain what “will be fail” means?

    #53482

    garfield
    Participant

    @maccowley wrote:

    I am running an Alix board with 3.2.1 without any problems.
    Could you explain what “will be fail” means?

    It give no output on seriell console. In the meantime i have testet the version 3.3.2 (USB image).
    This works only with some modifications into grub.cfg. You must add the kernel parameter console=38400,n8.
    After this you get the kernel boot messages into seriell console from alix 2d3 board.

    Following steps are to do:

      1. write image to cf-card gunzip -c imagefile.gz > /dev/
      2. mount first partition from cf-card (writable) on your local pc
      3. edit /grub/grub.cfg
      4. add linux kernel parameter console=38400,n8 between root=… and quit kernel parameter.
      5. save the file, unmount and insert cf-card into alix board
Viewing 8 posts - 1 through 8 (of 8 total)

You must be logged in to reply to this topic.