[Bug 1373781] Re: bash incomplete fix for CVE-2014-6271
Since the last update:
ii bash 4.3-7ubuntu1.4 amd64
GNU Bourne Again SHell
the following happen:
lars@dachs:/tmp$ rm -f echo env -i X='() { (a)=\' bash -c 'echo id'; cat
echo
id
cat: echo: No such file or directory
lars@dachs:/tmp$
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1373781
Title:
bash incomplete fix for CVE-2014-6271
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/bash/+bug/1373781/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1373781] Re: bash incomplete fix for CVE-2014-6271
Maybe this helps others to verify: https://raw.githubusercontent.com/hannob/bashcheck/master/bashcheck lars@dachs:~$ ./bashcheck Not vulnerable to CVE-2014-6271 (original shellshock) Not vulnerable to CVE-2014-7169 (taviso bug) Not vulnerable to CVE-2014-7186 (redir_stack bug) Test for CVE-2014-7187 not reliable without address sanitizer Variable function parser inactive, likely safe from unknown parser bugs ** CVE added: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2014-6271 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2014-7186 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2014-7187 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1373781 Title: bash incomplete fix for CVE-2014-6271 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/bash/+bug/1373781/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1058030] Re: Log full of xhci_hcd WARN
@Marcus: Applied your patches to my kernel and it fixed both... Cardreader is working now! Thanks! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1058030 Title: Log full of xhci_hcd WARN To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1058030/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1058030] Re: Log full of xhci_hcd WARN
Got same messages on an samsung 730u3e S07 with ubuntu 13.04 beta and kernel 3.8.0-19-generic. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1058030 Title: Log full of xhci_hcd WARN To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1058030/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
