Re: Bash in Gentoo is vulnerable.
Alex Xu <alex_y_xu-FFYn/[email protected]>
| Newsgroups | gmane.linux.gentoo.hardened |
|---|---|
| Message-ID | <[email protected]> |
On 24/09/14 08:14 PM, Jacek wrote:
> Bash in Gentoo (app-shells/bash-4.2_p45) is vulnerable to this threat:
>
> https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-6271
>
>
> Simple test:
>
> |$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"|
>
>
> Cheers
> ;-)
>
yer about 17 hours late on the uptake
signature.asc
(application/pgp-signature, 819 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJUI166AAoJEOFfLQs172iqSs0P/3tpJEPOQ/KLUM+GvlcwQDR9 pIVVbrlgpuWOC9E7hexnwC4nZZcaMa4Hb1z7NYm0PUdz4eibK6QDrEtUsmrMfkCN GUfEIIWXS2Guc649R/LuAXiWPxLpz2LYAoM7p0OwKiJTKrFb23aLIeFEiviBDFy+ Ci22IwwiNzlrzUlr8yxugnDDrGrbIyBATXMKcwFIOcHWpTanJAETJL/5dmuC8Yvz Ukbyyga0sxE/ZL88STY8YFZbQLTNPMFgct14rb7q2g0+BzbXCJcRbKQNh5bnZXCI Kvbxs8xGFVS19JWkFsrPxOpUMHmsaLRNXSDU1kWLeQgBIvQeaMHWXvbxsvjklb1f iEjrAX4oz5zu587CwFZfR/jcdy22HaGZ6OB6/UA/s1pyJ5KWpghzp9lnjOt2LcVq 6JIm9c9HXINwjoORPskoWugxU7I7A/drKKJncKIwWF/6Eo1LcsDp1RoV6ZmD1AKg KvuHYt3UT8KcN2V1HD27oo6tSWpcO7AzAnZYy8PM4vTESuq72eeCSGOYm7ElqQU7 qEkxNEAEVcX1kNf46xY/CzESPwUrgaSy4vq4DMMsL0uO//6bOIqOb207xAlB+2nk gOcDB6af42JJwQksd/YIBmZloxyjaQZhoejUW2IT7eKqDqXGvt0z26N14LDtKU5x QfvnSg2tc5rf1+Kvs2N0 =BvHy -----END PGP SIGNATURE-----