oss-sec mailing list archives

Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278)

From: Shawn <citypw () gmail com>
Date: Thu, 2 Oct 2014 11:02:53 +0800

On Thu, Oct 2, 2014 at 11:00 AM, Michal Zalewski <lcamtuf () coredump cx> wrote:

What else could I say? A POC already released and a bunch of
customer's machines are waiting...


You should install Florian's patch / bash43-027.

I've read your blog and started doing this. Thanks.

/mz




-- 
GNU powered it...
GPL protect it...
God blessing it...

regards
Shawn

Current thread:

Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278), (continued)
- Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Shawn (Oct 01)
  - Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Chet Ramey (Oct 01)
    - Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Shawn (Oct 01)
    - Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Ed Prevost (Oct 01)
    - Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Zach Wikholm (Oct 01)
    - RE: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Henry, Bobby (Oct 01)
    - Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Chet Ramey (Oct 01)
    - Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Ed Prevost (Oct 01)
    - Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Shawn (Oct 01)
    - Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Michal Zalewski (Oct 01)
    - Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Shawn (Oct 01)
    - Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Ed Prevost (Oct 01)
    - Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Chet Ramey (Oct 02)
    - Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Chet Ramey (Oct 01)
    - RE: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Sona Sarmadi (Oct 01)
    - Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Solar Designer (Oct 02)
    - Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Chet Ramey (Oct 02)
    - RE: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Menkhus, Mark (Global Cyber Security SSRT) (Oct 02)
    - RE: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Sona Sarmadi (Oct 02)
    - RE: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Menkhus, Mark (Global Cyber Security SSRT) (Oct 02)
    - Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Michal Zalewski (Oct 02)

(Thread continues...)