3 ms·
Please give me an example of how somebody not running a Web server and a collection of CGI scripts is affected. A git server? Are you running one of these? Move
by f00ber 12y ago
Please give me an example of how somebody not running a Web server and a collection of CGI scripts is affected. A git server? Are you running one of these? Move on, nothing to see for most of us.
- clarry 12y agoYou're in the wrong place. Hacker News isn't "Linux Grandmas' User Group". We're a varied bunch, many of us are admins or software developers, and yes we operate servers. For a living or otherwise. Security announcements like this are both interesting (hackers, remember?) and relevant to what many of us do.
- f00ber 12y agoWell, then do be clear that "If you are a Linux admin that runs a Web server that invokes code via old style CGI interface, then go and update". Please stop spreading panic among uninformed people. If you are running stuff via CGI or allow random people to invoke shell on your servers, then you have bigger problems than a bug in bash. A shell was never meant to be secure. Yes, I am a systems engineer too.