Comment 2SXA Re: Incomplete patch

Story

Vulnerability in Bash Shell widespread and serious

Preview

Incomplete patch (Score: 1)

by seriously@pipedot.org on 2014-09-25 10:24 (#2SWZ)

Note that the patch issued yesterday fixes only part of the issue and some vulnerabilities remain, so patch now but be ready to patch again soon ;-)

Also, according to the bug report, the remaining problems also impact zsh. (edit: this has been refuted since then)

Some more detailed info on the general issue can be found at Red Hat's security blog

Re: Incomplete patch (Score: 1)

by zafiro17@pipedot.org on 2014-09-25 11:06 (#2SX2)

Interesting - I didn't know about the zsh aspect of it and almost put in a wisecrack about upgrading to zsh to stay safe - glad I didn't!

BTW, if anyone knows a good tutorial for the zsh I'd be interested. There are lots of blogs but no great, single resource other than the manual, which is many pages too long.

Re: Incomplete patch (Score: 2, Informative)

by seriously@pipedot.org on 2014-09-25 12:32 (#2SXA)

Also, according to the bug report, the remaining problems also impact zsh.
This has been refuted in the same bug report, so zsh is safe from this issue. You can consider the upgrade ;)

Moderation

Time Reason Points Voter
2014-09-25 13:03 Informative +1 tdk@pipedot.org

Junk Status

Not marked as junk