Major security alert: bash shell bug can pwn your box

Due to overwhelming demand, we have created a forum just dedicated to Toughbook users who use Linux!
Message
Author
User avatar
mklym
Posts: 907
Joined: Fri Feb 22, 2013 3:10 pm
Location: Edmonton, Alberta

Re: Major security alert: bash shell bug can pwn your box

#11 Post by mklym »

The install of Mint 17 went well, except for the fact that Firefox will not fire up, get a 'Profile Missing' error. Same after uninstall and reinstall of FF. FFS...For Fuque Sake. Bash is good though.

Yep, phone up and running, same number.
CF-29LTQ,CF-31SBM,CF-52youngGUN,

Life's Journey is not to arrive safely at the grave in a well preserved body, but rather to skid in sideways totally worn-out shouting 'Woo Hoo! What a ride!

Motorsports - the only real sport. If it doesn't have a motor, it is just a game.

There is always something waiting at the end of the road, if you are not willing to see what it is, you probably shouldn't be out there in the first place.

User avatar
SHEEPMAN!
Posts: 2239
Joined: Thu Oct 14, 2010 1:13 pm
Location: TDR-HQ California

Re: Major security alert: bash shell bug can pwn your box

#12 Post by SHEEPMAN! »

I just installed LMDE 17 ....Linux Mint Debian.
Using 14.1 Video with no screen problems.
And it's 'vulnerable' after upgrades. I wanted to see if they had fixed it yet. :blowaway:
Gotta re-read that patch stuff. :read:
Fair for you/ Fair for me.
I chose to NOT be organized.

-------------------------------------------------------------------[/color]
http://toughbooktalk.com/
http://forum.notebookreview.com/panasonic/

User avatar
mklym
Posts: 907
Joined: Fri Feb 22, 2013 3:10 pm
Location: Edmonton, Alberta

Re: Major security alert: bash shell bug can pwn your box

#13 Post by mklym »

From the bit I posted earlier:

LMDE is not yet patched, but you can get a patched version of bash from Debian sid. See this post:
http://forums.linuxmint.com/viewtopic.p ... 60#p928236

Good that there is no problems with Flicker. :D
CF-29LTQ,CF-31SBM,CF-52youngGUN,

Life's Journey is not to arrive safely at the grave in a well preserved body, but rather to skid in sideways totally worn-out shouting 'Woo Hoo! What a ride!

Motorsports - the only real sport. If it doesn't have a motor, it is just a game.

There is always something waiting at the end of the road, if you are not willing to see what it is, you probably shouldn't be out there in the first place.

User avatar
SHEEPMAN!
Posts: 2239
Joined: Thu Oct 14, 2010 1:13 pm
Location: TDR-HQ California

Re: Major security alert: bash shell bug can pwn your box

#14 Post by SHEEPMAN! »

lm@cf30lmde ~/Desktop $ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
this is a test
lm@cf30lmde ~/Desktop $

Relatively painless. If this is correct. Ya just have to read words and type a little. :D

Edit: 4.3.9.2 unstable which fits my sop. End Edit
Fair for you/ Fair for me.
I chose to NOT be organized.

-------------------------------------------------------------------[/color]
http://toughbooktalk.com/
http://forum.notebookreview.com/panasonic/

User avatar
mklym
Posts: 907
Joined: Fri Feb 22, 2013 3:10 pm
Location: Edmonton, Alberta

Re: Major security alert: bash shell bug can pwn your box

#15 Post by mklym »

Right on. Looks good. Ya, don't fear the terminal, eh. LOL :D
Now off to town to check the FoxTrot on my fresh Minty 17 install. L8R. :salute:
CF-29LTQ,CF-31SBM,CF-52youngGUN,

Life's Journey is not to arrive safely at the grave in a well preserved body, but rather to skid in sideways totally worn-out shouting 'Woo Hoo! What a ride!

Motorsports - the only real sport. If it doesn't have a motor, it is just a game.

There is always something waiting at the end of the road, if you are not willing to see what it is, you probably shouldn't be out there in the first place.

User avatar
kode-niner
Posts: 700
Joined: Sat Jun 07, 2014 7:39 am
Location: Canada

Re: Major security alert: bash shell bug can pwn your box

#16 Post by kode-niner »

There are now 3 critical patches to bash 4.3. Latest bash version from the developer seems to be 4.3.27

The 27 indicates the build version, which is released as patches applied to the 4.3 series since March with only the last 3 pertaining to the latest bug. Keep in mind that your distro may not run 4.3.27 and may be separately patched by your distro maintainers. That being said, it wouldn't hurt to attempt to re-download or upgrade bash to make sure you have all three patches, assuming your distro has deployed the latest one that was released Saturday, September 27th.
Daily drives a CF-31

User avatar
SHEEPMAN!
Posts: 2239
Joined: Thu Oct 14, 2010 1:13 pm
Location: TDR-HQ California

Re: Major security alert: bash shell bug can pwn your box

#17 Post by SHEEPMAN! »

Mint 17 upgrades include a bash upgrade.
Fair for you/ Fair for me.
I chose to NOT be organized.

-------------------------------------------------------------------[/color]
http://toughbooktalk.com/
http://forum.notebookreview.com/panasonic/

Post Reply

Return to “The LINUX forum!!!”