News for hackers. Stuff that matters.
Re:CVE-2014-6271: Remote code execution through bash by auxiliation on Wednesday September 24, 2014 @04:25PM (#8363920)
> Related to that, does anyone else know if upgrading bash will require a restart of other services kind of like upgrading openssl requires restarting things?

I don't think it will, for a couple of reasons. OpenSSL is integrated into other services as a library, while bash would be called as an external application. I also noticed that once I upgraded bash, the proof of concept stopped working in a terminal I opened prior to the upgrade.

Re:CVE-2014-6271: Remote code execution through bash by fragmede on Wednesday September 24, 2014 @07:28PM (#8364727)
> I also noticed that once I upgraded bash, the proof of concept stopped working in a terminal I opened prior to the upgrade.

[citation needed] because that doesn't sound possible.

Re:CVE-2014-6271: Remote code execution through bash by lutusp on Wednesday September 24, 2014 @07:32PM (#8364736)
Not if the issued commands spawned a new copy of Bash.