3 ms·
> So, why doesn't someone exploit bash to update bash. Because each Bash version has different machine-language instructions. There's no realistic way to fix B
by lutusp 12y ago
> So, why doesn't someone exploit bash to update bash.
Because each Bash version has different machine-language instructions. There's no realistic way to fix Bash other than by editing the plain-text source and generating binaries for each target processor type.
> ... and all it would take is one to work and then bash would be updated.
Maybe a refresher is indicated, as to the nature of modern computer binaries and how they're created.
- Prefinem 12y ago> Maybe a refresher is indicated, as to the nature of modern computer binaries and how they're created. I was assuming executing commands like "apt-get update bash", "yum update bash" etc to cover the majority of distros
- lutusp 12y agoBut it's both simpler and more effective to issue those commands directly -- they would either perform the update or benignly say that the current Bash version is up to date. And suppose a particular vulnerability test fails on a Bash version that is nonetheless vulnerable, and therefore fails to install a critical security update?