3 ms·

I did 'yum update bash' on my Centos 5.8 Linode a couple of hours ago, and it updated to 3.2-33 and is apparently no longer vulnerable, according to the one-lin

I did 'yum update bash' on my Centos 5.8 Linode a couple of hours ago, and it updated to 3.2-33 and is apparently no longer vulnerable, according to the one-line test I have been using: X="() { :;} ; echo busted" /bin/sh -c "echo stuff"

gklyne 12y ago
That test doesn't detect the vulnerability - needs to mention /bin/bash not /bin/sh
- bigbugbag 12y ago
  Well, maybe you should look at your /bin/sh ls -l /bin/sh lrwxrwxrwx 1 root root 4 Sep 24 08:07 /bin/sh -> bash
  - makomk 12y ago
    I think /bin/sh is /bin/bash on CentOS and RedHat, but Debian, Ubuntu and probably other distros use dash as /bin/sh instead which was never vulnerable.