1
Quick notes about the bash bug, its impact, and the fixes so far
We spent a good chunk of the day investigating the now-famous bash bug (CVE-2014-6271), so I had no time to make too many jokes about it on...
Michał Zalewski (lcamtuf)
I retired this site back in 2022 for a couple of reasons. If you like the content, please subscribe to the new blog at blog.coredump.cx .
- Popular posts
- 13
- Total points
- 2,699
- HN comments
- 793
- Rank
- #549 personal
Visit lcamtuf.blogspot.com → RSS feedOn Hacker News Oct 2010 – Mar 2018
Security & Privacy 10Web & Frontend 5Infrastructure & DevOps 3Tools & Productivity 2Society, Policy & Culture 1Life, Learning & Writing 1
2
Bash bug: the other two RCEs, or how we chipped away at the original fix
The patch that implements a prefix-based way to mitigate vulnerabilities in bash function exports has been out since last week and has been...
3
Bash bug: apply the unofficial patch now (CVE-2014-6277)
OK, rebuild bash and deploy Florian's unofficial patch or its now-upstream version now. If you're a distro maintainer, please consider doi...