Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-06 Thread eles via Digitalmars-d-announce
On Sunday, 5 October 2014 at 21:53:08 UTC, eles wrote: On Sunday, 5 October 2014 at 21:13:01 UTC, Kagamin wrote: On Friday, 3 October 2014 at 11:25:59 UTC, eles wrote: it) and a new-comer on the scene is Tranglu, that I just *Tanglu http://www.tanglu.org/en/

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-06 Thread Steven Schveighoffer via Digitalmars-d-announce
On 10/2/14 3:42 AM, Kagamin wrote: On Thursday, 2 October 2014 at 07:14:35 UTC, Iain Buclaw via Digitalmars-d-announce wrote: Doesn't Linux Mint provide an upgrade facility for you? No idea. I use Linux Mint, I believe I upgraded once *. I don't think it was complex, just an upgrade

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-06 Thread Kiith-Sa via Digitalmars-d-announce
On Monday, 6 October 2014 at 15:06:04 UTC, Steven Schveighoffer wrote: On 10/2/14 3:42 AM, Kagamin wrote: On Thursday, 2 October 2014 at 07:14:35 UTC, Iain Buclaw via Digitalmars-d-announce wrote: Doesn't Linux Mint provide an upgrade facility for you? No idea. I use Linux Mint, I believe

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-06 Thread Steven Schveighoffer via Digitalmars-d-announce
On 10/6/14 12:10 PM, Kiith-Sa wrote: On Monday, 6 October 2014 at 15:06:04 UTC, Steven Schveighoffer wrote: On 10/2/14 3:42 AM, Kagamin wrote: On Thursday, 2 October 2014 at 07:14:35 UTC, Iain Buclaw via Digitalmars-d-announce wrote: Doesn't Linux Mint provide an upgrade facility for you?

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-05 Thread eles via Digitalmars-d-announce
On Thursday, 2 October 2014 at 11:12:12 UTC, Kagamin wrote: On Thursday, 2 October 2014 at 07:43:54 UTC, eles wrote: update-manager -d It works. Does it perform package upgrade? The comments are rather scary: --- Hi, I have installed Linux mint 15 with Mint4Win as Dual boot with Windows 7.

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-05 Thread Paul O'Neil via Digitalmars-d-announce
On 10/01/2014 04:50 PM, Nick Sabalausky wrote: On 10/01/2014 01:38 PM, Iain Buclaw via Digitalmars-d-announce wrote: One nice thing about Ubuntu is that they even give you access to future kernel versions through what they call HWE. In short, I can run a 14.04 LTS kernel on a 12.04 server,

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-05 Thread Kagamin via Digitalmars-d-announce
On Friday, 3 October 2014 at 11:25:59 UTC, eles wrote: Debian and Debian-based asks you to confirm file overwrite (usually, the diff is displayed too). Isn't it the same package manager? It should be able to do the same on mint. Or may be fstab can be copied somewhere and then back at some

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-05 Thread eles via Digitalmars-d-announce
On Sunday, 5 October 2014 at 21:13:01 UTC, Kagamin wrote: On Friday, 3 October 2014 at 11:25:59 UTC, eles wrote: Debian and Debian-based asks you to confirm file overwrite (usually, the diff is displayed too). Isn't it the same package manager? It should be able to do the same on mint. Or

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-03 Thread Kagamin via Digitalmars-d-announce
On Thursday, 2 October 2014 at 12:44:08 UTC, eles wrote: I doubt. At least, not easily. However, installing LMDE should be a one-time process (it's a rolling distribution). Do rolling distributions guarantee to not overwrite fstab? How mint package update differs from a rolling distro package

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-03 Thread David Nadlinger via Digitalmars-d-announce
On Friday, 3 October 2014 at 07:16:14 UTC, Kagamin wrote: On Thursday, 2 October 2014 at 12:44:08 UTC, eles wrote: I doubt. At least, not easily. However, installing LMDE should be a one-time process (it's a rolling distribution). Do rolling distributions guarantee to not overwrite fstab? How

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-03 Thread eles via Digitalmars-d-announce
On Friday, 3 October 2014 at 07:16:14 UTC, Kagamin wrote: On Thursday, 2 October 2014 at 12:44:08 UTC, eles wrote: I doubt. At least, not easily. However, installing LMDE should be a one-time process (it's a rolling distribution). Do rolling distributions guarantee to not overwrite fstab? How

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-03 Thread John Colvin via Digitalmars-d-announce
On Friday, 3 October 2014 at 11:31:07 UTC, eles wrote: On Friday, 3 October 2014 at 07:16:14 UTC, Kagamin wrote: On Thursday, 2 October 2014 at 12:44:08 UTC, eles wrote: I doubt. At least, not easily. However, installing LMDE should be a one-time process (it's a rolling distribution). Do

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-03 Thread Dicebot via Digitalmars-d-announce
On Friday, 3 October 2014 at 11:31:07 UTC, eles wrote: The former attempt stability (because all packages are tested together, along with their interactions), while the latter attempt cutting-edge software (you update software as it gets produced). This generally true but not entirely true.

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-03 Thread Brad Roberts via Digitalmars-d-announce
On 10/3/2014 3:25 AM, David Nadlinger via Digitalmars-d-announce wrote: On Friday, 3 October 2014 at 07:16:14 UTC, Kagamin wrote: On Thursday, 2 October 2014 at 12:44:08 UTC, eles wrote: I doubt. At least, not easily. However, installing LMDE should be a one-time process (it's a rolling

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-03 Thread eles via Digitalmars-d-announce
On Friday, 3 October 2014 at 17:20:11 UTC, Brad Roberts via Digitalmars-d-announce wrote: On 10/3/2014 3:25 AM, David Nadlinger via Digitalmars-d-announce wrote: On Friday, 3 October 2014 at 07:16:14 UTC, Kagamin wrote: On Thursday, 2 October 2014 at 12:44:08 UTC, eles wrote: My oldest

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-02 Thread Kagamin via Digitalmars-d-announce
On Wednesday, 1 October 2014 at 20:03:11 UTC, Dicebot wrote: This a very unpleasant experience you get compared to sticking to LTS or up to date distro Erm, upgrading to the latest version is exactly what I want, old version is of no interest to me. I read, one can reorient aptitude to

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-02 Thread Iain Buclaw via Digitalmars-d-announce
On 2 October 2014 08:00, Kagamin via Digitalmars-d-announce digitalmars-d-announce@puremagic.com wrote: On Wednesday, 1 October 2014 at 20:03:11 UTC, Dicebot wrote: This a very unpleasant experience you get compared to sticking to LTS or up to date distro Erm, upgrading to the latest

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-02 Thread eles via Digitalmars-d-announce
On Thursday, 2 October 2014 at 11:12:12 UTC, Kagamin wrote: On Thursday, 2 October 2014 at 07:43:54 UTC, eles wrote: update-manager -d It works. Does it perform package upgrade? The comments are rather scary: --- Hi, I have installed Linux mint 15 with Mint4Win as Dual boot with Windows 7.

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-02 Thread Kagamin via Digitalmars-d-announce
On Thursday, 2 October 2014 at 11:40:31 UTC, eles wrote: You simply made the wrong choice in the beginning. Well, it looked popular and easy. Can I upgrade my mint to lmde?

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-02 Thread eles via Digitalmars-d-announce
On Thursday, 2 October 2014 at 12:06:16 UTC, Kagamin wrote: On Thursday, 2 October 2014 at 11:40:31 UTC, eles wrote: Well, it looked popular and easy. Sorry. It's just that everything that glitters... Can I upgrade my mint to lmde? I doubt. At least, not easily. However, installing LMDE

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-01 Thread Iain Buclaw via Digitalmars-d-announce
On 1 October 2014 06:09, Nick Sabalausky via Digitalmars-d-announce digitalmars-d-announce@puremagic.com wrote: Don't mean to be alarmist, but I'm posting this in case anyone else is like me and hasn't been paying attention since this news broke (AIUI) about a week ago. Apparently bash has

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-01 Thread Steven Schveighoffer via Digitalmars-d-announce
On 10/1/14 1:09 AM, Nick Sabalausky wrote: Patches have been issued (and likely more to come from what I gather), so: FWIW, MacOS X now has an update for bash that fixes the bug, apparently came out last night. http://support.apple.com/kb/HT6495 -Steve

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-01 Thread JN via Digitalmars-d-announce
On Wednesday, 1 October 2014 at 05:09:45 UTC, Nick Sabalausky wrote: Other OSes/distros are likely equally easy. Please, reply with examples to help ensure other people on the same OS/distro as you have no excuse not to update! I find it ironic that it's another big global security hole

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-01 Thread eles via Digitalmars-d-announce
On Wednesday, 1 October 2014 at 13:41:43 UTC, JN wrote: On Wednesday, 1 October 2014 at 05:09:45 UTC, Nick Sabalausky wrote: I find it ironic that it's another big global security hole about which Windows users don't even have to be concerned about. That's of course very true, since Windows

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-01 Thread Paulo Pinto via Digitalmars-d-announce
On Wednesday, 1 October 2014 at 13:58:25 UTC, eles wrote: On Wednesday, 1 October 2014 at 13:41:43 UTC, JN wrote: On Wednesday, 1 October 2014 at 05:09:45 UTC, Nick Sabalausky wrote: I find it ironic that it's another big global security hole about which Windows users don't even have to be

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-01 Thread Kagamin via Digitalmars-d-announce
On Wednesday, 1 October 2014 at 14:29:16 UTC, Paulo Pinto wrote: You would be surprised how some Fortune 500 companies are doing their serious work in 100% Windows servers. Sadly I need to comply with NDAs. Isn't NASDAQ enough?

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-01 Thread Kagamin via Digitalmars-d-announce
On Wednesday, 1 October 2014 at 05:09:45 UTC, Nick Sabalausky wrote: Apparently bash has it's own heartbleed now, dubbed shellshock. Does it affect dash? Also, how does one update software on linux? Last I checked, when new version is out, repository of the previous version becomes utterly

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-01 Thread Dicebot via Digitalmars-d-announce
On Wednesday, 1 October 2014 at 14:44:06 UTC, Kagamin wrote: Also, how does one update software on linux? Last I checked, when new version is out, repository of the previous version becomes utterly abandoned. A pity, on windows one can roll new software versions as long as they are maintained.

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-01 Thread eles via Digitalmars-d-announce
On Wednesday, 1 October 2014 at 14:44:06 UTC, Kagamin wrote: On Wednesday, 1 October 2014 at 05:09:45 UTC, Nick Sabalausky wrote: Does it affect dash? No. It is a bashism, ie an extension specific to Bash. Busybox users are not concerned neither. A pity, on windows one can roll new

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-01 Thread Steven Schveighoffer via Digitalmars-d-announce
On 10/1/14 12:57 PM, Kagamin wrote: On Wednesday, 1 October 2014 at 15:48:58 UTC, Dicebot wrote: This claim is so strange I can't even understand what it is about. Which repositories get abandoned? Repositories of the not latest version of the OS. Because only latest version receives

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-01 Thread eles via Digitalmars-d-announce
On Wednesday, 1 October 2014 at 16:57:07 UTC, Kagamin wrote: On Wednesday, 1 October 2014 at 15:45:26 UTC, eles wrote: Repositories of the not latest version of the OS. Because only latest version receives development. That is, if the OS doesn't have rolling updates. What is the difference

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-01 Thread Iain Buclaw via Digitalmars-d-announce
On 1 October 2014 18:12, Steven Schveighoffer via Digitalmars-d-announce digitalmars-d-announce@puremagic.com wrote: On 10/1/14 12:57 PM, Kagamin wrote: On Wednesday, 1 October 2014 at 15:48:58 UTC, Dicebot wrote: This claim is so strange I can't even understand what it is about. Which

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-01 Thread Dicebot via Digitalmars-d-announce
On Wednesday, 1 October 2014 at 16:57:07 UTC, Kagamin wrote: On Wednesday, 1 October 2014 at 15:45:26 UTC, eles wrote: The first thing that I love in Linux is the centralized update. The downside is it's taken down centrally too, while distributed windows software continues to work

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-01 Thread Dicebot via Digitalmars-d-announce
On Wednesday, 1 October 2014 at 18:42:41 UTC, Kagamin wrote: A have linux mint 12 installation with mint4win (wubi), on linux mint forums I was told, that updating from the latest repository won't work. I would be grateful, if you explain, how to upgrade it to the latest version. Yeah,

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-01 Thread Nick Sabalausky via Digitalmars-d-announce
On 10/01/2014 03:19 PM, Brad Roberts via Digitalmars-d-announce wrote: On 10/1/2014 6:41 AM, JN via Digitalmars-d-announce wrote: On Wednesday, 1 October 2014 at 05:09:45 UTC, Nick Sabalausky wrote: Other OSes/distros are likely equally easy. Please, reply with examples to help ensure other

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-01 Thread Nick Sabalausky via Digitalmars-d-announce
On 10/01/2014 02:42 PM, Kagamin wrote: A have linux mint 12 installation with mint4win (wubi), on linux mint forums I was told, that updating from the latest repository won't work. I sympathize:

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-01 Thread Nick Sabalausky via Digitalmars-d-announce
On 10/01/2014 01:38 PM, Iain Buclaw via Digitalmars-d-announce wrote: One nice thing about Ubuntu is that they even give you access to future kernel versions through what they call HWE. In short, I can run a 14.04 LTS kernel on a 12.04 server, so that I'm able to use modern hardware and take

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-10-01 Thread Dicebot via Digitalmars-d-announce
On Wednesday, 1 October 2014 at 20:45:14 UTC, Nick Sabalausky wrote: I suspect Mint may need to do things that way just as a manpower issue. Mint's a popular distro, but I get the impression it's development is a relatively small grassroots thing with much more limited resources than say

[OT Security PSA] Shellshock: Update your bash, now!

2014-09-30 Thread Nick Sabalausky via Digitalmars-d-announce
Don't mean to be alarmist, but I'm posting this in case anyone else is like me and hasn't been paying attention since this news broke (AIUI) about a week ago. Apparently bash has it's own heartbleed now, dubbed shellshock. Warm fuzzy flashbacks of TMNT: The Arcade Game aside, this appears to

Re: [OT Security PSA] Shellshock: Update your bash, now!

2014-09-30 Thread Nick Sabalausky via Digitalmars-d-announce
On 10/01/2014 01:09 AM, Nick Sabalausky wrote: Debian 6: (Including setting up the LTS repos): $ sudo cat 'deb http://http.debian.net/debian squeeze-lts main contrib non-free' /etc/apt/sources.list $ sudo cat 'deb-src http://http.debian.net/debian squeeze-lts main contrib non-free'