Mailing List Archive

On 24/09/14 08:14 PM, Jacek wrote:
> Bash in Gentoo (app-shells/bash-4.2_p45) is vulnerable to this threat:
>
> https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-6271
>
>
> Simple test:
>
> |$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"|
>
>
> Cheers
> ;-)
>
yer about 17 hours late on the uptake

W dniu 25.09.2014 o 02:15, Alex Xu pisze:
> On 24/09/14 08:14 PM, Jacek wrote:
>> Bash in Gentoo (app-shells/bash-4.2_p45) is vulnerable to this threat:
>>
>> https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-6271
>>
>>
>> Simple test:
>>
>> |$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"|
>>
>>
>> Cheers
>> ;-)
>>
> yer about 17 hours late on the uptake
>
Thanks
;_)

On 09/24/2014 08:14 PM, Jacek wrote:
> Bash in Gentoo (app-shells/bash-4.2_p45) is vulnerable to this threat:
>
> https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-6271
>

Already fixed:

https://bugs.gentoo.org/show_bug.cgi?id=523592

On 25/09/2014 03:01, Michael Orlitzky wrote:
> On 09/24/2014 08:14 PM, Jacek wrote:
>> Bash in Gentoo (app-shells/bash-4.2_p45) is vulnerable to this threat:
>>
>> https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-6271
>>
>
> Already fixed:
>
> https://bugs.gentoo.org/show_bug.cgi?id=523592

It isn't fixed until such time as CVE-2014-7169 is addressed. I've
updated the above mentioned bug with further information.

--Kerin