I suggest you read this https://www.debian.org/security/2014/dsa-3032, .this https://www.debian.org/security/2014/dsa-3035, and this https://security-tracker.debian.org/tracker/CVE-2014-7169


On 5 October 2014 14:38, Felmon Davis <davisf@union.edu> wrote:
greets!

just hoping for confirmation one way or the other: I've upgraded wheezy and bash --version says

GNU bash, version 4.2.37(1)-release (i486-pc-linux-gnu)

when I run the shellshock test script:

env x='() { :;}; echo vulnerable' bash -c "echo this is a test"

this is what I get:

this is a test

I think this says I'm fit but I'm not sure.... some sites say there should be an error statement.

F.


--
Felmon Davis

It is easier to be wise for others than for oneself.  -- La Rochefoucald

---------------------------------------------------------------------
To unsubscribe, e-mail: trinity-users-unsubscribe@lists.pearsoncomputing.net
For additional commands, e-mail: trinity-users-help@lists.pearsoncomputing.net
Read list messages on the web archive: http://trinity-users.pearsoncomputing.net/
Please remember not to top-post: http://trinity.pearsoncomputing.net/mailing_lists/#top-posting