Re: Incomplete patch

Incomplete patch (Score: 1)

by seriously@pipedot.org on 2014-09-25 10:24 (#2SWZ)

Note that the patch issued yesterday fixes only part of the issue and some vulnerabilities remain, so patch now but be ready to patch again soon ;-)

Also, according to the bug report, the remaining problems also impact zsh. (edit: this has been refuted since then)

Some more detailed info on the general issue can be found at Red Hat's security blog

Re: Incomplete patch (Score: 1)

by zafiro17@pipedot.org on 2014-09-25 11:06 (#2SX2)

Interesting - I didn't know about the zsh aspect of it and almost put in a wisecrack about upgrading to zsh to stay safe - glad I didn't!

BTW, if anyone knows a good tutorial for the zsh I'd be interested. There are lots of blogs but no great, single resource other than the manual, which is many pages too long.