2

To know if you are vulnerable, you can run:

env X="() { :;} ; echo busted" /bin/sh -c "echo completed"
env X="() { :;} ; echo busted" `which bash` -c "echo completed"

If you see "busted" then you are vulnerable.

Is there a patch yet?

7
  • 13.04 has been out of support for some time, so instead of patching, think about switching to a supported LTS release, 14.04 or 12.04. Sep 25, 2014 at 7:25
  • It's a good suggestion and may be what I have to do - but I have a number of deployed systems on 13.04 and I expect stuff will break if I upgrade to 14.04.
    – Mike McKay
    Sep 25, 2014 at 7:33
  • 1
    @MikeMcKay if you are concerned about this bug in 13.04 why are you not concerned about not getting updates at all in 13.04?! "Is there a patch yet?" No, and there will most likely not be a patch for 13.04.
    – Rinzwind
    Sep 25, 2014 at 7:47
  • 1
    Anyway, still some problem to fix... look at apple.stackexchange.com/questions/146849/…
    – Rmano
    Sep 25, 2014 at 8:53
  • 1

0

Browse other questions tagged .