bug-bash
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Bash 2.05b patch for 896776 - (CVE-2014-6271) ?


From: Jean-Christian de Rivaz
Subject: Bash 2.05b patch for 896776 - (CVE-2014-6271) ?
Date: Fri, 26 Sep 2014 10:53:42 +0200
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Icedove/24.7.0

Hello,

While this can seem completely obsolete, I still have machines running bash 2.05b (Debian etch). I worry about upgrading to bash 3.x because of some backward compatibility issue. It there any reason why there was no patch for bash 2.05b ? The test command below show that the bug also affect this version:

j$ bash --version
GNU bash, version 2.05b.0(1)-release (i386-pc-linux-gnu)
Copyright (C) 2002 Free Software Foundation, Inc.
j$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
vulnerable
this is a test

Best Regards,

Jean-Christian



reply via email to

[Prev in Thread] Current Thread [Next in Thread]