It looks like Ubuntu (and Debian by extension) patched it as well, I ran the
test before and after an apt-get upgrade and got this output:
ronald@paragon:~$ env x='() { :;}; echo vulnerable' bash -c "echo this is a
test"
vulnerable
this is a test
ronald@paragon:~$ env x='() { :;}; echo vulnerable' bash -c "echo this is a
test"
bash: warning: x: ignoring function definition attempt
bash: error importing function definition for `x'
this is a test
Pleasantly,
Ronald Bynoe
________________________________________
From: [email protected] [[email protected]] on
behalf of Rich Shepard [[email protected]]
Sent: Thursday, September 25, 2014 9:14 AM
To: Portland Linux/Unix Group
Subject: Re: [PLUG] cross-platform bash vulnerability widespread
On Thu, 25 Sep 2014, Damo Gets wrote:
> Long story short, if you can execute this shell command:
Damo,
Slackware's dev team released a patched version yesterday evening. I'm
upgrading all systems here.
Rich
_______________________________________________
PLUG mailing list
[email protected]
http://lists.pdxlinux.org/mailman/listinfo/plug
_______________________________________________
PLUG mailing list
[email protected]
http://lists.pdxlinux.org/mailman/listinfo/plug
