undefined | Better HN

0 points1e-96y ago0 comments

The latest versions of RHEL/CentOS 6 use coreutils version 8.4, so I assume their shuf defaults to insecure. I imagine that RHEL 5 ELS must have the same issue. I don't know of any other currently-supported Linux or BSD versions that might be a problem.

0 comments

3 comments · 1 top-level

ThA0x26y ago· 2 in thread

RHEL 5 is from 2007, and is already past end of life (end of extended support is this November).

RHEL 6 is from 2009, and it's end of life is this November.

Both of those OS are not from 2013 or later. They may have minor versions that were released later, but minor versions typically don't make significant changes to core packages.

RHEL 7 (2014) and Ubuntu 13.04 both have coreutils 8.20 or newer.

1e-9OP6y ago

RHEL 6 ELS will be supported until 2024.

My comments are not contradictory to your point about 2013. They are only meant to make people aware that there are supported OS versions in use that have this issue.

ThA0x26y ago

RHEL 6 is end of life (product retirement) this November. ELS indeed extends out till 2024, but that's after the product has been officially retired/EOLed.

Essentially, come November, there will not be a generally supported Linux OS that will have this issue.

1 more reply

j / k navigate · click thread line to collapse