Re: [Fed-Talk] OS X < 10.10 a "Critical" finding in ACAS
Re: [Fed-Talk] OS X < 10.10 a "Critical" finding in ACAS
- Subject: Re: [Fed-Talk] OS X < 10.10 a "Critical" finding in ACAS
- From: David Mueller <email@hidden>
- Date: Fri, 24 Oct 2014 08:50:17 -0700
On Oct 24, 2014, at 5:52 AM, Taylor Armstrong - NOAA Affiliate <email@hidden> wrote:
> The issue is that since 10.10 includes the shellshock "fix", which is rated
> "critical", it is being flagged by many agencies as "lacking the shellshock
> fix" despite having been previously patched, and despite Security Update
> 2014-005 including the patch, and thus it is getting a significant amount
> of negative publicity at the moment.
Nessus/ACAS has separate plugins for testing Shellshock. On a fully patched 10.9.5 system these plugins do not return any findings, but they do return the critical finding for < 10.10.
- David
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden