Reputation
12,316
Top tag
Next privilege 15,000 Rep.
Protect questions
Badges
9 43 76
Newest
 Yearling
Impact
~2.5m people reached

Sep
27
comment What is the CVE-2014-6271 bash vulnerability (Shellshock) and how do I fix it?
@blade19899 the new CVE has been fixed and I have already updated my answer. I'll update the question to use the better known term shellshock.
Sep
26
revised What is the CVE-2014-6271 bash vulnerability (Shellshock) and how do I fix it?
deleted 284 characters in body
Sep
26
awarded  Favorite Question
Sep
25
comment What is the CVE-2014-6271 bash vulnerability (Shellshock) and how do I fix it?
@daveshaw I would recommend creating a separate answer about the security-proposed ppa.
Sep
25
comment What is the CVE-2014-6271 bash vulnerability (Shellshock) and how do I fix it?
@matth can you show a source, article, or demo to show that it is actually vulnerable? I've seen many articles indicating the contrary.
Sep
25
revised What is the CVE-2014-6271 bash vulnerability (Shellshock) and how do I fix it?
added 383 characters in body
Sep
25
comment What is the CVE-2014-6271 bash vulnerability (Shellshock) and how do I fix it?
@don.joey it simply sets the environment variable called x to the value '() { :;}; echo vulnerable'. It then invokes bash asking it to echo back the word hello. The value of x that is set is a function definition that should do nothing. However, it is crafted to try to run 'echo vulnerable' at parsing of environment at bash start-up, which just prints vulnerable to standard out.
Sep
25
revised What is the CVE-2014-6271 bash vulnerability (Shellshock) and how do I fix it?
deleted 30 characters in body
Sep
25
revised What is the CVE-2014-6271 bash vulnerability (Shellshock) and how do I fix it?
added 108 characters in body
Sep
25
awarded  Famous Question
Sep
25
comment What is the CVE-2014-6271 bash vulnerability (Shellshock) and how do I fix it?
@Michael as long as you have a backport repository enabled in software sources you should get a fixed version that addresses the first CVE. The second that was reported has not had a fix released yet.
Sep
25
comment What is the CVE-2014-6271 bash vulnerability (Shellshock) and how do I fix it?
@Rinzwind updated.
Sep
25
revised What is the CVE-2014-6271 bash vulnerability (Shellshock) and how do I fix it?
added 478 characters in body
Sep
25
awarded  Good Question
Sep
25
awarded  Good Answer
Sep
25
awarded  Notable Question
Sep
25
awarded  Nice Question
Sep
25
awarded  Nice Answer
Sep
25
awarded  Popular Question
Sep
24
asked What is the CVE-2014-6271 bash vulnerability (Shellshock) and how do I fix it?