bash security hole

[accessys at smart.net]

got an update from Kubuntu site this morning with the Bash patch

Bob


On Thu, 25 Sep 2014, Scott DuBois wrote:

> Date: Thu, 25 Sep 2014 07:46:13 -0700
> From: Scott DuBois <sdubois at linux.com>
> Reply-To: Kubuntu user technical support <kubuntu-users at lists.ubuntu.com>
> To: kubuntu-users at lists.ubuntu.com
> Subject: Re: bash security hole
> 
> On 09/25/2014 03:15 AM, Mark Fraser wrote:
>> On Thursday 25 Sep 2014 10:46:14 A.J. Bonnema wrote:
>>> On 09/25/2014 10:38 AM, Errol Sapir wrote:
>>>> I received this url from a Linux friend of mine.
>>>>
>>>> http://arstechnica.com/security/2014/09/bug-in-bash-shell-creates-big-secu
>>>> rity-hole-on-anything-with-nix-in-it/
>>>>
>>>> I did the test and saw I was vulnerable so I did read the Ubuntu page,
>>>> did the "fix" which is
>>>> $ sudo apt-get update
>>>> $ sudo apt-get dist-upgrade
>>>> and am no longer vulnerable.
>>>>
>>>> Errol
>>>
>>> Thanks for the tip. I run Fedora 20. It has the same vulnerability, but
>>> no patch was issued yet. Hopefully the patch is in the pipeline.
>>>
>>> For me it is not that urgent as my machines have no open ports to the
>>> internet (no open servers). However, I will feel better when this is
>>> patched. It is a pretty simple way to break in. Yes, I really fear
>>> script kiddies -- of any age -- xD.
>>>
>>> Guus.
>>
>> I read somewhere that as we us dash instead of bash that Ubuntu isn't
>> vulnerable, but I did the security update yesterday anyway.
>>
>
> You must have ran across some bad info, I tested for the vulnerability
> yesterday at 6pm and had it. Ran update & upgrade and it was fixed.
>
> https://access.redhat.com/articles/1200223
>
> --
> Scott DuBois
> President EBLUG
> BSIT Software Engineering
> Freenode: Roguehorse
>
> --
> kubuntu-users mailing list
> kubuntu-users at lists.ubuntu.com
> Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/kubuntu-users
>