[lp-ca-on] [WARN] Remote code execution through bash

[Sergio Durigan Junior]

Hey,

Not sure how many of you track security vulnerabilities and such, so I
thought it'd be best to warn :-).

  <http://seclists.org/oss-sec/2014/q3/650>

This is a bash vulnerability that has been found, and affect most bash
users.  To test if your bash is compromised, you can use this simple
command:

  env x='() { :;}; echo vulnerable' bash -c "test"

You should see something like:

  bash: warning: x: ignoring function definition attempt
  bash: error importing function definition for `x'
  test

If not, then you should update your bash.  Debian is already offering
the update, and I am still waiting for Fedora.

Cheers,

-- 
Sergio
GPG key ID: 0x65FC5E36
Please send encrypted e-mail if possible
http://sergiodj.net/