ZENworks Configuration Management vulnerability with GNU Bash Remote Code Execution (aka ShellShock)

Shellshock, also known as Bashdoor, is a security vulnerability in the widely used Linux/Unix Bash shell. Novell ZENworks Configuration Management is affected by this security vulnerability. For more details on this, please visit http://en.wikipedia.org/wiki/Shellshock_%28software_bug%29

Further information regarding these security issues can be found here:

• https://support.novell.com/security/cve/CVE-2014-6271.html
• https://support.novell.com/security/cve/CVE-2014-6277.html
• https://support.novell.com/security/cve/CVE-2014-6278.html
• https://support.novell.com/security/cve/CVE-2014-7169.html
• https://support.novell.com/security/cve/CVE-2014-7186.html
• https://support.novell.com/security/cve/CVE-2014-7187.html

For ZENworks Configuration Management running on SLES operating system, please refer to TID 7015702, which provides specific instructions on how to apply the patch to the Operating System to address this issue. 

For ZENworks Virtual Appliance, please use the information provided in this document in order to overcome this vulnerability.

The patch and instructions can be downloaded from download.novell.com under ZENworks Configuration Management product section, or directly by clicking on this link.  This patch applies only to ZEN Virtual Appliance.
On the other hand, this patch will also be automatically included in any future update for ZCM Appliance.