Vulnerability in Bash Shell widespread and serious

in security on (#2SWX)
Upgrade now, if you can. A bug discovered in the widely used Bash command interpreter poses a critical security risk to Unix and Linux systems - and, thanks to their ubiquity, the internet at large.

From the Register:
It lands countless websites, servers, PCs, OS X Macs, various home routers, and more, in danger of hijacking by hackers.

The vulnerability is present in Bash up to and including version 4.3, and was discovered by Stephane Chazelas. It puts Apache web servers, in particular, at risk of compromise: CGI scripts that use or invoke Bash in any way - including any child processes spawned by the scripts - are vulnerable to remote-code injection. OpenSSH and some DHCP clients are also affected on machines that use Bash.
Now is also a good time to wipe your servers and reinstall Minix or Plan9 as a precaution. ;)

Re: Incomplete patch (Score: 1)

by on 2014-09-25 11:06 (#2SX2)

Interesting - I didn't know about the zsh aspect of it and almost put in a wisecrack about upgrading to zsh to stay safe - glad I didn't!

BTW, if anyone knows a good tutorial for the zsh I'd be interested. There are lots of blogs but no great, single resource other than the manual, which is many pages too long.
Post Comment
The list cake, blue, brown, library and coffee contains how many colors?