News for hackers. Stuff that matters.

A comment on CVE-2014-6271: Remote code execution through bash. Parent comment

Re:CVE-2014-6271: Remote code execution through bash by traviscj on Wednesday September 24, 2014 @01:45PM (#8362897)
Depends on whether you have mirrors.linode.com or the ubuntu servers set up in sources.list. I had to swap mine out.
[ Parent | on HN ]
Re:CVE-2014-6271: Remote code execution through bash by teach on Wednesday September 24, 2014 @02:09PM (#8363075)
Well, I didn't even know about mirrors.linode.com. Mine were still the ubuntu default servers.

I guess apt-get from one of Linode's mirrors saves bandwidth? Or is it just more polite?

[ Parent | on HN ]
Re:CVE-2014-6271: Remote code execution through bash by aaronem on Wednesday September 24, 2014 @03:14PM (#8363504)
It probably ensures that you get the Linode-customized flavors of packages where such exist, so that, for example, you don't inadvertently upgrade your kernel to a build without the ability to mount Linode disks.
[ Parent | on HN ]
Re:CVE-2014-6271: Remote code execution through bash by crylon on Wednesday September 24, 2014 @05:33PM (#8364270)
Linode can't modify packages; they're signed by the upstream distro. (Unless Linode added a key of their own to your apt keychain (apt-key list), but I've never seen that.)
[ Parent | on HN ]
Re:CVE-2014-6271: Remote code execution through bash by iancarroll on Wednesday September 24, 2014 @03:47PM (#8363684)
It's also meant to help you and Linlde save bandwidth!
[ Parent | on HN ]