Ask Your Question
4

How can I determine if my Fedora workstation is affected by the Shellshock bash vulnerability

asked 2014-09-25 14:00:04 -0600

npatricksmith gravatar image

I assume folks are aware of this bug. If not, background here http://www.troyhunt.com/2014/09/everything-you-need-to-know-about.html .

I'm a Fedora 20 user. How can I tell if I'm affected.

edit retag flag offensive close merge delete

Comments

1

Make sure you have read http://fedoramagazine.org/shellshock-update-bash-packages-that-resolve-cve-2014-6271-and-cve-2014-7169-available/ and will you fixed bash package bash-4.2.48-2.fc20

pnemade gravatar imagepnemade ( 2014-09-25 22:03:41 -0600 )edit

I upvoted but to be honest, in a workstation environment, you aren't going to need to worry much. You're probably affected right now and with the next update you won't be. You need to worry if your computer is publicly accessible.

jcuenod gravatar imagejcuenod ( 2014-09-26 04:10:48 -0600 )edit

1 Answer

Sort by ยป oldest newest most voted
2

answered 2014-09-25 14:04:09 -0600

baoboa gravatar image

updated 2014-09-28 17:01:29 -0600

try this in a bash shell

env X="() { :;} ; echo shellshock" `which bash` -c "echo completed"

if you see shellshock printed , update your bash

UPDATE: bash package is now ready for fedora 19 to 21

edit flag offensive delete link more

Comments

The result is:

-bash: syntax error near unexpected token `('
npatricksmith gravatar imagenpatricksmith ( 2014-09-25 14:10:23 -0600 )edit

problem with markdown , should work now

baoboa gravatar imagebaoboa ( 2014-09-25 14:13:46 -0600 )edit

The result is:

/usr/bin/bash: warning: X: ignoring function definition attempt
/usr/bin/bash: error importing function definition for `X'
completed
npatricksmith gravatar imagenpatricksmith ( 2014-09-25 14:24:12 -0600 )edit

you should be pretty safe, but from online discussion this bug is not completely close at now.

baoboa gravatar imagebaoboa ( 2014-09-25 14:31:18 -0600 )edit
baoboa gravatar imagebaoboa ( 2014-09-25 14:36:30 -0600 )edit

Question Tools

1 follower

Stats

Asked: 2014-09-25 14:00:04 -0600

Seen: 533 times

Last updated: Sep 28 '14