LinuxBBQ

Posted: **Thu Sep 25, 2014 7:39 am**

http://seclists.org/oss-sec/2014/q3/650
https://lists.debian.org/debian-securit ... 00220.html

Please apt-get update and dist-upgrade (or --upgrade-only) bash by the end of the week.

Debian and other GNU/Linux vendors plan to disclose a critical,
remotely exploitable security vulnerability in bash this week, related
to the processing of environment variables. Stephane Chazelas
discovered it, and CVE-2014-6271 has been assigned to it.

Posted: **Thu Sep 25, 2014 7:58 am**

Thanks for this.

Posted: **Thu Sep 25, 2014 9:04 am**

cheers

Posted: **Thu Sep 25, 2014 5:06 pm**

I won't make a new warning but you should also upgrade apt for security reasons, there was a buffer overflow.

https://lists.debian.org/debian-securit ... 00219.html

Posted: **Fri Sep 26, 2014 6:40 am**

Once more - this time with feeling...
http://www.theregister.co.uk/2014/09/25 ... ype_fears/

new version number

Code: Select all

4.2+dfsg-0.1+deb7u3

gonna be a loong friday...

LinuxBBQ

Remote Exploit Vulnerability Found In Bash

Remote Exploit Vulnerability Found In Bash

Re: Remote Exploit Vulnerability Found In Bash

Re: Remote Exploit Vulnerability Found In Bash

Re: Remote Exploit Vulnerability Found In Bash

Re: Remote Exploit Vulnerability Found In Bash