VMWare virtually in control of Shellshock

VMware is plugging away at Shellshock holes in 37 virtual appliance products, but has so far shipped clean code for just a handful of appliances. The company released a fix for cloud analytics kit vCenter Log Insight and offered updates on four others. The advisory said a variety of VMware appliances shipped with Shellshock- …

[Anonymous Coward]

I bet they are glad that they upgraded most of their management tools to Powershell. Far more secure (and much more powerful) than BASH.

[Anonymous Coward]

Check the list again...

They released a whole bunch of updates late last night. Still not everything, but they're getting there:

2. Relevant Releases (Affected products for which remediation is present)

ESX 4.1 without patch ESX410-201410401-SG

ESX 4.0 without patch ESX400-201410401-SG

vCenter Server Appliance prior to 5.5 U2a

vCenter Server Appliance prior to 5.1 U2b

vCenter Server Appliance prior to 5.0 U3b

Horizon Workspace 1.x, 2.x without patch

IT Business Management Suite prior to 1.1.0

IT Business Management Suite prior to 1.0.1

vCenter Log Insight prior to 2.0U1

vCenter Operations Manager 5.x without patch

vCenter Site Recovery Manager prior to 5.5.1.3

vCenter Site Recovery Manager prior to 5.1.2.2

vCloud Application Director 5.x, 6.x without patch

vCloud Automation Center 6.x without patch

vCloud Automation Center Application Services 6.x without patch

vCloud Director Appliance prior to 5.5.1.3

vFabric Postgres prior to 9.3.5.1

vFabric Postgres prior to 9.2.9.1

vFabric Postgres prior to 9.1.14.1

VMware Data Recovery prior to 2.0.4

VMware Mirage Gateway prior to 5.1.1

vSphere Replication prior to 5.8.0.1

vSphere Replication prior to 5.5.1.3

vSphere Replication prior to 5.1.2.2

vSphere Storage Appliance prior to 5.5.2