Gentoo Archives: gentoo-hardened

From: Alex Xu <alex_y_xu@×××××.ca>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Bash in Gentoo is vulnerable.
Date: Thu, 25 Sep 2014 00:16:01
Message-Id: 54235EBA.6020003@yahoo.ca
In Reply to: [gentoo-hardened] Bash in Gentoo is vulnerable. by Jacek
1 On 24/09/14 08:14 PM, Jacek wrote:
2 > Bash in Gentoo (app-shells/bash-4.2_p45) is vulnerable to this threat:
3 >
4 > https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-6271
5 >
6 >
7 > Simple test:
8 >
9 > |$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"|
10 >
11 >
12 > Cheers
13 > ;-)
14 >
15 yer about 17 hours late on the uptake

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies

Subject Author
Re: [gentoo-hardened] Bash in Gentoo is vulnerable. Jacek <wampir98@×××××.com>