Re: Bash in Gentoo is vulnerable.
Jacek <[email protected]>
| Newsgroups | gmane.linux.gentoo.hardened |
|---|---|
| Message-ID | <[email protected]> |
W dniu 25.09.2014 o 02:15, Alex Xu pisze:
> On 24/09/14 08:14 PM, Jacek wrote:
>> Bash in Gentoo (app-shells/bash-4.2_p45) is vulnerable to this threat:
>>
>> https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-6271
>>
>>
>> Simple test:
>>
>> |$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"|
>>
>>
>> Cheers
>> ;-)
>>
> yer about 17 hours late on the uptake
>
Thanks
;_)
signature.asc
(application/pgp-signature, 213 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iF4EAREIAAYFAlQjYc0ACgkQBp5lD9OatUx7dQD/bc3MbrauuhMcgHow44pDQSie Gq+PcYt0VUDvX/WK5n8A/31ShdSkzVlJlyZkH9tBmIcNVHPmJ63yAWv2x0Q1wX7s =n8A4 -----END PGP SIGNATURE-----