Sophos products and the Bash vulnerability (Shellshock)

• Article ID: 121444
• Updated: 26 Sep 2014

In the light of the recent Bash vulnerability known as "Shellshock" (CVE-2014-6271 and CVE-2014-7169), we have reviewed its products to understand if any are at risk.

As far as we are aware, none of our products can be exploited by means of this bug.

As a matter of good security practice, we will be updating the various Sophos-supplied versions of Bash as soon as a stable and effective patch is available from the Bash maintainers.

For more information, see our Naked Security post: http://nakedsecurity.sophos.com/2014/09/25/bash-shellshock-vulnerability-what-you-need-to-know/

If you need more information or guidance, then please contact technical support.

CNet is reporting that Bash bug is “Bigger than Heartblead”

CNet writers Claire Reilly and Steven Musil just reported that a quarter of a century old vulnerability known as the Bash or Shellshock bug could cause major havoc. This is a big deal because it can cause problems with almost all installed system that have Internet access.

See more about this problem at: read more

OneDrive now allows you to upload 10GB size files

Microsoft sent out notification yesterday announcing that they have increased your file size upload to 10GB files and  if you have the free Outlook.com email account you only have a 15GB storage limit. If you have upgraded to Office365 then you have a 1TB storage limit. Do you think that it is worth $60/year to have a 1TB of cloud Storage?