Re: Healing the bash fork

["Mark R Bannister" <mark () proseconsulting co uk>]

> I discuss the setuid/setgid vulnerability at the following site,> including demonstrating how Florian's prefix/suffix 
> patch provides
> no protection:>
> http://technicalprose.blogspot.co.uk/2014/09/shellshock-bug-third-vulnerability.html

Please can we have a separate CVE for the setuid/setgid bash exploit?  I think this attack vector deserves to be 
tracked properly, and we need to be clear on when and if someone chooses to provide a fix for it.

Thanks,
Mark.