3 ms·

I don't know if Ubuntu has pushed a patched version of bash, but bash is what you should update. Someone already posted a way to test whether your version is v

by clarry 12y ago

I don't know if Ubuntu has pushed a patched version of bash, but bash is what you should update. Someone already posted a way to test whether your version is vulnerable. You might also look into changing the default shell (but beware, scripts with bashisms in them...).

hamiltonkibbe 12y ago
Ubuntu pushed the update around noon 4.3-7ubuntu1.1
- pjungwir 12y ago
  Really? I haven't been able to find any notice of that, and on 14.04 LTS if I run `sudo apt-get install --only-upgrade bash` I'm still vulnerable.
  - ForHackernews 12y ago
    http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-6271.html http://people.canonical.com/~ubuntu-security/cve/2014/CVE-20...
  - pjungwir 12y ago
    Ah, looks like I needed to run `sudo apt-get update` first.
- hamiltonkibbe 12y ago
  sudo apt-get update && sudo apt-get upgrade
- gcb0 12y ago
  yeah, it was updated in debian in the morning...