Langues

Connexion utilisateur
Créer un nouveau compte

Navigation

Dons récents

Sanchez
a donné SEK 20.00

Petr Alt
a donné € 200.00

Anonyme
a donné € 20.00

jonathan alaerts
a donné € 20.00

Petr Alt
a donné € 200.00

Faire un don maintenant !

bc1q3t3vxjhd3dmvg3cfn24k4l7n4mf750utpp75hn

Soumis par ivaylo le jeu, 09/25/2014 - 12:59

Bash security bug

A bug in GNU Bash had been discovered that allows an attacker to execute arbitrary code.

To test if a system is volunarable execute:

env x='() { :;}; echo vulnerable' bash -c "echo this is a test"

Volunarable system will return

vulnerable
this is a test

Secure system will return:

bash: warning: x: ignoring function definition attempt
bash: error importing function definition for `x'
this is a test

Debian 7 has already been patched.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6271
http://arstechnica.com/security/2014/09/bug-in-bash-shell-creates-big-security-hole-on-anything-with-nix-in-it/

Vous devez vous identifier ou créer un compte pour écrire des commentaires

quidam:

mer, 10/29/2014 - 21:15

Automatically closed -- issue fixed for 2 weeks with no activity.

Vous devez vous identifier ou créer un compte pour écrire des commentaires

SirGrant:

mer, 10/15/2014 - 21:13

Vous devez vous identifier ou créer un compte pour écrire des commentaires

Legimet:

mar, 09/30/2014 - 22:58

Fixed, please change the bug status.

Vous devez vous identifier ou créer un compte pour écrire des commentaires

jxself:

sam, 09/27/2014 - 09:10

Trisquel 7 is still in development and is not officially supported at this time. If you wish a stable and secure system please stick with version 6 until 7 is released and official support begins. Otherwise please remember that you are using an unsupported Trisquel version. If you'd like to try it out and help make it better by reporting bugs and such, thanks! However, timely updates for unsupported versions should not be expected.