Mac and Linux O/Ss get a security Bashing!

[Bryn]

http://www.theregister.co.uk/2014/09/24/bash_shell_vuln/

[MrGongGong]

A bit more here

http://www.independent.co.uk/life-style/gadgets-and-tech/shell-shock-bash-bug-bigger-than-heartbleed-could--undermine-security-of-millions-of-websites-9754720.html

So more or less anyone who uses the internet then

But as there's nothing anyone can do about it
might as well sit back and wait for the asteroid impact while listening to Feldman

[Dave2002]

Pvt Frazer: "We're all doomed!"

[johnb]

Thanks for the heads up. I've just installed the latest updates on my Ubuntu server and the tests that are suggested in the article show I am safe. (Pity I didn't run the tests before doing the updates.)

[Andrew Slater]

Thanks for the heads up. I've just installed the latest updates on my Ubuntu server and the tests that are suggested in the article show I am safe. (Pity I didn't run the tests before doing the updates.)

For what it's worth, I ran the two lines on my un-updated Ubuntu 12.4 and the second line failed. On updating, it passed: it ignored the function definition attempt.

[french frank]

What about those of us who don't know what a shell is? :-(

[Andrew Slater]

What about those of us who don't know what a shell is? :-(

I wouldn't like to define it, but I think it's roughly a process running in a multi-process environment. A 'command prompt console' is such a shell (?); copying and pasting each of the commands in the grey box of Bryn's link into such a shell will allow the vulnerability to be tested .....

[french frank]

I wouldn't like to define it, but I think it's roughly a process running in a multi-process environment. A 'command prompt console' is such a shell (?); copying and pasting each of the commands in the grey box of Bryn's link into such a shell will allow the vulnerability to be tested .....

Thank you, Andrew ...

[richardfinegold]

A bit more here

http://www.independent.co.uk/life-style/gadgets-and-tech/shell-shock-bash-bug-bigger-than-heartbleed-could--undermine-security-of-millions-of-websites-9754720.html

So more or less anyone who uses the internet then

But as there's nothing anyone can do about it
might as well sit back and wait for the asteroid impact while listening to Feldman

Is Feldman your choice because listening to his music seems to make time last longer?

[MrGongGong]

Is Feldman your choice because listening to his music seems to make time last longer?

He is my choice because his music is wonderful

(even with the Lancaster Bombers)

[Bryn]

Is Feldman your choice because listening to his music seems to make time last longer?

I very much doubt that. For me it has quite the opposite effect. For Philip Guston and SQ2 make the time fly past.

[Risorgimento]

Unless you are running a server at home then TBH this bash problem is a bit of a non-event for you and I wouldn't be unduly worried. Apple have now released a security fix but only for operating systems later than Snow Leopard. So if you are still running Snow Leopard then I would suggest that the writing is on the wall and that you will see no further updates or security fixes out of Apple.