Re: about bash and Debian Lenny

Paul Wise p...@debian.org wrote: On Thu, Oct 2, 2014 at 1:37 AM, Jann Horn wrote: You're doing this the wrong way - as others have already said, upgrade your server to a supported release. Based on our off-list discussions, Nikolay has valid reasons for not upgrading. Oh dear! Pabs,

Re: about bash and Debian Lenny

Shellshock has such big impact on the internet so please give us Lenny package. You need to remember that Debian is a project staffed by volunteers, some of whom have already offered packages. If you cannot trust random binaries then the patches are available. If you do have a

External check

CVE-2014-3657: RESERVED CVE-2014-3661: RESERVED CVE-2014-3662: RESERVED CVE-2014-3663: RESERVED CVE-2014-3664: RESERVED CVE-2014-3666: RESERVED CVE-2014-3667: RESERVED CVE-2014-3678: RESERVED CVE-2014-3679: RESERVED CVE-2014-3680: RESERVED CVE-2014-3681: RESERVED CVE-2014-7217: RESERVED -- The