News for hackers. Stuff that matters.

A comment on CVE-2014-6271: Remote code execution through bash. Parent comment

Re:CVE-2014-6271: Remote code execution through bash by clarry on Wednesday September 24, 2014 @12:08PM (#8362224)
I don't know if Ubuntu has pushed a patched version of bash, but bash is what you should update. Someone already posted a way to test whether your version is vulnerable.

You might also look into changing the default shell (but beware, scripts with bashisms in them...).

[ Parent | on HN ]
Re:CVE-2014-6271: Remote code execution through bash by hamiltonkibbe on Wednesday September 24, 2014 @12:13PM (#8362261)
Ubuntu pushed the update around noon

4.3-7ubuntu1.1

[ Parent | on HN ]
Re:CVE-2014-6271: Remote code execution through bash by pjungwir on Wednesday September 24, 2014 @12:21PM (#8362318)
Really? I haven't been able to find any notice of that, and on 14.04 LTS if I run `sudo apt-get install --only-upgrade bash` I'm still vulnerable.
[ Parent | on HN ]
Re:CVE-2014-6271: Remote code execution through bash by pjungwir on Wednesday September 24, 2014 @12:26PM (#8362353)
Ah, looks like I needed to run `sudo apt-get update` first.
[ Parent | on HN ]
Re:CVE-2014-6271: Remote code execution through bash by ForHackernews on Wednesday September 24, 2014 @12:25PM (#8362351)
http://people.canonical.com/~ubuntu-security/cve/2014/CVE-20...
[ Parent | on HN ]
Re:CVE-2014-6271: Remote code execution through bash by hamiltonkibbe on Wednesday September 24, 2014 @12:24PM (#8362341)
sudo apt-get update && sudo apt-get upgrade
[ Parent | on HN ]
Re:CVE-2014-6271: Remote code execution through bash by gcb0 on Wednesday September 24, 2014 @07:13PM (#8364684)
yeah, it was updated in debian in the morning...
[ Parent | on HN ]