Ubuntu 10.04LTS - 14.04LTS appears to be patched: http://www.ubuntu.com/usn/usn-... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		donw on Sept 25, 2014 \| parent \| context \| favorite \| on: Bash 'shellshock' bug is wormable Ubuntu 10.04LTS - 14.04LTS appears to be patched: http://www.ubuntu.com/usn/usn-2362-1/ Logging into my server, things look good -- this is why you turn on automatic security updates. :)

timv on Sept 25, 2014 [–]

That update appears to only patch CVE-2014-6271 and not CVE-2014-7169 ( See: https://news.ycombinator.com/item?id=8365158 )

Although 7169 appears to be more difficult to exploit than 6271, you're not out of the woods until a patch gets distributed (+applied!) that covers both CVEs.

donw on Sept 25, 2014 | [–]

Good catch, thanks!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact