salt-shellshock

Aggiornamento bash per shellshock Questa ricetta prova ad aggiornare bash dal pacchetto del sistema operativo, e ricade nella compilazione di bash su sistemi senza aggiornamenti disponibili. Funziona per noi su vecchi ubuntu/debian. Script di installazione di bash da:...

rt42 -- vulnerabilities related to shellshock

Best Practical reports: RT 4.2.0 and above may be vulnerable to arbitrary execution of code by way of CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, or CVE-2014-6271 -- collectively known as "Shellshock." This vulnerability requires a privileged user with access to an RT instance...

[SECURITY] New versions of bash fixes buffer overflows

We have received reports that the bash shell had a problem with very long pathnames. When a very long path was encountered bash failed to check the result of getcwd in all places, which could be exploited. We recommend you upgrade your bash package immediately. wget url will fetch the file for yo...