[mdlug] shellshock

[Carl T. Miller]

R Kannan wrote:
> On 09/26/2014 07:31 PM, Carl T. Miller wrote:
>> R Kannan wrote:
>>> On 09/26/2014 02:30 PM, Carl T. Miller wrote:
>>>> Here's a oneliner to see if you're safe:
>>>>
>>>> env x='() { :;}; echo -n NOT\ ' bash -c 'echo safe from shellshock'
>>> bash: warning: x: ignoring function definition attempt
>>> bash: error importing function definition for `x'
>>> safe from shellshock
>>>
>>> Am I missing something? Why am I getting an error?
>> The main thing is that you're not vulnerable to shellshock.
>> The version I got doesn't give an error, it just doesn't
>> run the "echo -n NOT\ " bit.
>>
>> What distro are you using?  What version of bash?
>>
> Ubuntu 12.04
> bash 4.2-2ubuntu2.2 - Apparently patched on 9/22/2014 :-)

Yes, it sounds like you're all set.

c