0

On the internet, I noticed there were Patches for the Shellshock vulnerability which is scaring me a lot. Does Ubuntu 14.10 have this automatically in it?

10
  • 1
    yes, it was patched. askubuntu.com/questions/528101/…
    – Panther
    Oct 8, 2014 at 2:50
  • 1
    No. Shellshock is several bugs, all of which are very similar, that affect how Bash stores and uses variables. Some of these bugs have been fixed, some have not, not even in Trusty. On the Shellshock Wikipedia page there are commands and short scripts you can run to test for each vulnerability. Some patches are still in development, so my answer is no. It probably will get the patches before launch though.
    – John Scott
    Oct 8, 2014 at 2:55
  • 2
    @FuzzyToothpaste my system passed all those tests on wikipedia.
    – Panther
    Oct 8, 2014 at 3:10
  • 1
    @Bran Linux is not vulnerable. Bash is. Linux is just the kernel Maybe you should have a look at gnu.org/gnu/linux-and-gnu.html
    – John Scott
    Oct 8, 2014 at 3:56
  • 1
    So basically, if you go with another shell, you're safe , right? Oct 8, 2014 at 6:10

1 Answer 1

1

As Ubuntu 14.10 is not set for release until October 26th changes can occur in what is found in the final disc image. No definite answer can be given until release as to what will appear. The changelog is available that shows actions taken with regards to package changes and the most recent new upload to 14.10 of bash as of answer submission was made on 2014-10-07.

Not the answer you're looking for? Browse other questions tagged .