The Notebook Review forums were hosted by TechTarget, who shut down them down on January 31, 2022. This static read-only archive was pulled by NBR forum users between January 20 and January 31, 2022, in an effort to make sure that the valuable technical information that had been posted on the forums is preserved. For current discussions, many NBR forum users moved over to NotebookTalk.net after the shutdown.
Problems? See this thread at archive.org.

    Bug in Bash shell creates big security hole on anything with *nix

    Discussion in 'Linux Compatibility and Software' started by JOSEA, Sep 24, 2014.

  1. JOSEA

    JOSEA NONE

    Reputations:
    4,013
    Messages:
    3,521
    Likes Received:
    170
    Trophy Points:
    131
  2. ALLurGroceries

    ALLurGroceries  Vegan Vermin Super Moderator

    Reputations:
    15,730
    Messages:
    7,146
    Likes Received:
    2,343
    Trophy Points:
    331
  3. Falco152

    Falco152 Notebook Demon

    Reputations:
    442
    Messages:
    1,882
    Likes Received:
    75
    Trophy Points:
    66
    Well, that explains why most of my scripts suddenly stopped working after update.
     
  4. kode-niner

    kode-niner Notebook Consultant

    Reputations:
    34
    Messages:
    279
    Likes Received:
    113
    Trophy Points:
    56
    I've been patching like crazy since yesterday.

    To test if your version of Bash is vulnerable run this command:
    Code:
    env x='() { :;}; echo vulnerable'  bash -c "echo this is a test"
    If the above command outputs the word "vulnerable", you need to upgrade or patch bash.
     
  5. JOSEA

    JOSEA NONE

    Reputations:
    4,013
    Messages:
    3,521
    Likes Received:
    170
    Trophy Points:
    131
  6. kode-niner

    kode-niner Notebook Consultant

    Reputations:
    34
    Messages:
    279
    Likes Received:
    113
    Trophy Points:
    56
    ALLurGroceries and JOSEA like this.
  7. Peon

    Peon Notebook Virtuoso

    Reputations:
    406
    Messages:
    2,007
    Likes Received:
    128
    Trophy Points:
    81
    I'm more concerned about all the built-on-top-of-Linux devices out there - routers, NASes, and the like which are typically run by non-Linux users - who are more often than not unaware that their device runs Linux - than I am about desktop/server Linux systems which are typically used/administrated by people with an extremely high level of technical proficiency and thus will likely be patched very quickly.
     
  8. kode-niner

    kode-niner Notebook Consultant

    Reputations:
    34
    Messages:
    279
    Likes Received:
    113
    Trophy Points:
    56
    A second patch came out yesterday to address the unfixed portion of the bug. They appear to have been quickly uploaded in the main branches on Friday so most of us can just re-download bash, again.
     
  9. Falco152

    Falco152 Notebook Demon

    Reputations:
    442
    Messages:
    1,882
    Likes Received:
    75
    Trophy Points:
    66
    Well, most embedded devices are not affected by this since typically not use bash as their default shell.