CVE-2014-6271: Remote code execution through bash

Re:CVE-2014-6271: Remote code execution through bash by Danieru on Wednesday September 24, 2014 @12:54PM (#8362549)

You should also reboot to ensure no running instances of bash are vulnerable.

[ Parent | on HN ]

Re:CVE-2014-6271: Remote code execution through bash by cesarb on Wednesday September 24, 2014 @01:07PM (#8362647)

If I understood this bug correctly, it happens during bash's initialization. If I'm right, already running instances of bash are not vulnerable, and new instances will use the fixed executable, so no reboot would be necessary for this bug.

[ Parent | on HN ]

Re:CVE-2014-6271: Remote code execution through bash by dfc on Wednesday September 24, 2014 @03:34PM (#8363610)

  $ apt-cache show debian-goodies 
    <SNIP>
    checkrestart    - Help to find and restart processes which are using old
                      versions of upgraded files (such as libraries)

[ Parent | on HN ]

Re:CVE-2014-6271: Remote code execution through bash by bdarnell on Wednesday September 24, 2014 @01:10PM (#8362670)

The vulnerability is in bash startup; any already-running shells should be safe.

[ Parent | on HN ]

Re:CVE-2014-6271: Remote code execution through bash by sauere on Wednesday September 24, 2014 @01:06PM (#8362638)

Good point.

[ Parent | on HN ]