[Discuss] Shellshock

[John Blomfield]

On 09/25/2014 06:10 PM, Alan W. Irwin wrote:
> Furthermore,
>
> irwin at raven> ls -l /bin/sh
> lrwxrwxrwx 1 root root 4 Mar  1  2012 /bin/sh -> dash* 
On OpenSuse 13.1 all scripts, about 450, are bash. However the test:

env X="() { :;} ; echo busted" /bin/sh -c "echo stuff"

shows that the system is not vulnerable. I guess I must be up to date.

John

-- 
John Blomfield
Delivered by Thunderbird Email on Linux OpenSuse-KDE4

Old John B's Linux Notes http://www.oldjohnbslinux.wordpress.com


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://vlug.org/pipermail/discuss_vlug.org/attachments/20140925/1824eb40/attachment.html>