+- Linux Lite Forums (https://www.freecinema2022.gq/forums)
+-- Forum: General (https://www.freecinema2022.gq/forums/forumdisplay.php?fid=4)
+--- Forum: On Topic (https://www.freecinema2022.gq/forums/forumdisplay.php?fid=14)
+--- Thread: Bash vulnerability (/showthread.php?tid=893)
Bash vulnerability - newtusmaximus - 09-25-2014
http://www.bbc.co.uk/news/technology-29361794
What does this mean for us? reason for using linux was to be free from threats.
Re: Deadly serious' new vulnerability found - Wirezfree - 09-25-2014
(09-25-2014, 02:04 PM)newtusmaximus link Wrote: http://www.bbc.co.uk/news/technology-29361794
What does this mean for us? reason for using linux was to be free from threats.
Look at this existing thread:
https://www.freecinema2022.gq/forums/index.php?topic=925.msg5450;topicseen#msg5450
or just cut to the chase
Code:
env x='() { :;}; echo vulnerable' bash -c 'echo hello'If vulnerable:
Code:
sudo apt-get update && sudo apt-get install bashDavid
Re: Deadly serious' new vulnerability found - ohjrson - 09-25-2014
Ok I did this and this is what I got.
ohjrson@ohjrson-MS-6728:~$ env x='() { :;}; echo vulnerable' bash -c 'echo hello'
bash: warning: x: ignoring function definition attempt
bash: error importing function definition for `x'
hello
ohjrson@ohjrson-MS-6728:~$
What does all that mean? and what do I do now?
Ok just ran this: dpkg -s bash | grep Version
and got this: Version: 4.3-7ubuntu1.1
So That means I am good. Now is that what is installed with all of LL 2.0? Cause I just installed Beryl onto that other laptop Is that ok?
Thanks.
Re: Deadly serious' new vulnerability found - bitsnpcs - 09-25-2014
Hello,
this is addressed/fixed by installing an available update either by doing -
Menu>Favorites>Install Updates
or
Menu>All>Install Updates
Whichever is your preferred method for opening updates.
More info is found on this thread - https://www.freecinema2022.gq/forums/index.php?topic=925.0
Re: Deadly serious' new vulnerability found - Wirezfree - 09-25-2014
(09-25-2014, 03:27 PM)ohjrson link Wrote: Ok I did this and this is what I got.
ohjrson@ohjrson-MS-6728:~$ env x='() { :;}; echo vulnerable' bash -c 'echo hello'
bash: warning: x: ignoring function definition attempt
bash: error importing function definition for `x'
hello
ohjrson@ohjrson-MS-6728:~$
What does all that mean? and what do I do now?
Ok just ran this: dpkg -s bash | grep Version
and got this: Version: 4.3-7ubuntu1.1
So That means I am good. Now is that what is installed with all of LL 2.0? Cause I just installed Beryl onto that other laptop Is that ok?
Thanks.
Hi
Well I followed those instructions...
It said I was Vulnerable...
I did the update... and then just got "Hello"
So from the instructions I assume it's O.K
David
Re: Deadly serious' new vulnerability found - ohjrson - 09-25-2014
Check the version and see what it says.
Run this in terminal window: dpkg -s bash | grep Version
Paste results back in here.
Re: Deadly serious' new vulnerability found - Valtam - 09-25-2014
(09-25-2014, 02:04 PM)newtusmaximus link Wrote: http://www.bbc.co.uk/news/technology-29361794
What does this mean for us? reason for using linux was to be free from threats.
There is no such thing as a vulnerable free operating system, it's technologically impossible. If I had a choice between windows that has vulnerabilities numbering in the millions vs linux that has a few, I know what side I'd rather be on.
Please continue this discussion over here - https://www.freecinema2022.gq/forums/index.php?topic=925.0 this is the original thread. Thank you.