Page 2 of 2

Re: Major security alert: bash shell bug can pwn your box

Posted: Sat Sep 27, 2014 5:11 pm
by mklym
The install of Mint 17 went well, except for the fact that Firefox will not fire up, get a 'Profile Missing' error. Same after uninstall and reinstall of FF. FFS...For Fuque Sake. Bash is good though.

Yep, phone up and running, same number.

Re: Major security alert: bash shell bug can pwn your box

Posted: Sat Sep 27, 2014 5:40 pm
by SHEEPMAN!
I just installed LMDE 17 ....Linux Mint Debian.
Using 14.1 Video with no screen problems.
And it's 'vulnerable' after upgrades. I wanted to see if they had fixed it yet. :blowaway:
Gotta re-read that patch stuff. :read:

Re: Major security alert: bash shell bug can pwn your box

Posted: Sat Sep 27, 2014 5:48 pm
by mklym
From the bit I posted earlier:

LMDE is not yet patched, but you can get a patched version of bash from Debian sid. See this post:
http://forums.linuxmint.com/viewtopic.p ... 60#p928236

Good that there is no problems with Flicker. :D

Re: Major security alert: bash shell bug can pwn your box

Posted: Sat Sep 27, 2014 5:58 pm
by SHEEPMAN!
lm@cf30lmde ~/Desktop $ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
this is a test
lm@cf30lmde ~/Desktop $

Relatively painless. If this is correct. Ya just have to read words and type a little. :D

Edit: 4.3.9.2 unstable which fits my sop. End Edit

Re: Major security alert: bash shell bug can pwn your box

Posted: Sat Sep 27, 2014 6:17 pm
by mklym
Right on. Looks good. Ya, don't fear the terminal, eh. LOL :D
Now off to town to check the FoxTrot on my fresh Minty 17 install. L8R. :salute:

Re: Major security alert: bash shell bug can pwn your box

Posted: Tue Sep 30, 2014 5:47 pm
by kode-niner
There are now 3 critical patches to bash 4.3. Latest bash version from the developer seems to be 4.3.27

The 27 indicates the build version, which is released as patches applied to the 4.3 series since March with only the last 3 pertaining to the latest bug. Keep in mind that your distro may not run 4.3.27 and may be separately patched by your distro maintainers. That being said, it wouldn't hurt to attempt to re-download or upgrade bash to make sure you have all three patches, assuming your distro has deployed the latest one that was released Saturday, September 27th.

Re: Major security alert: bash shell bug can pwn your box

Posted: Sat Oct 04, 2014 3:34 pm
by SHEEPMAN!
Mint 17 upgrades include a bash upgrade.