Is DCE affected by the new Bash vulnerability?

[DCIM_Support]

is there any possible affect with the new Bash Vulnerability with DCE?

(CID:90899480)

[DCIM_Support]

Hi Stephen, We are waiting on an official statement from engineering on this. Once I receive it, I will update this forum. Thanks Regards, B

(CID:90899534)

[DCIM_Support]

Hi Stephen,

The Bash vulnerability does exist within DCE. However, luckily it is only exercisable by someone with root access to the system which we do not provide.

With that being said, we are working on an upgrade patch to the system and expect to have it available within the next two weeks.

-Scott

(CID:90899538)

[DCIM_Support]

Scott,

Thanks for the update on this. Is there a list that I can be added onto to get a update when this patch is available?

(CID:90899540)

[DCIM_Support]

Hi Stephen,

You can sign up to our Preference Center using the below link: (you can choose different categories you would like to get notifications on and what channels you would like to be contacted). 

https://preferences.schneider-electric.com/preferencecenter/account/login

I will also update this forum when the update is available. 

Hope this helps. 

Regards,

B

(CID:90899549)

[DCIM_Support]

Is there any update on this release date for the DCE Bash update?

(CID:90899966)

[DCIM_Support]

Hi Stephen,

Our estimates were based including just the initial patch that was made. Since there were about 5 days of new discoveries and patches after the initial finding we are slightly delayed. We're doing everything we can to get this done by the end of the day tomorrow (Eastern Standard Time) but it is looking tight.

-Scott

(CID:92078090)

[DCIM_Support]

Good news, we have just finalized testing of the 7.2.5 release which includes the Shellshock patch as well as an OpenSSL patch.

To get access to the upgrade please contact your regional tech support contact.

-Scott

(CID:92536886)

[DCIM_Support]

This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.