LinuxQuestions.org - [SOLVED] bash update doesn't fix Shellshock vulnerability (Puppy Slacko 5.7.0)?

- Puppy (https://www.linuxquestions.org/questions/puppy-71/)

- - bash update doesn't fix Shellshock vulnerability (Puppy Slacko 5.7.0)? (https://www.linuxquestions.org/questions/puppy-71/bash-update-doesnt-fix-shellshock-vulnerability-puppy-slacko-5-7-0-a-4175520524/)

bash update doesn't fix Shellshock vulnerability (Puppy Slacko 5.7.0)?

Hi,

Recently I have been trying out a number of Linux distros (which I have installed to my hard drive), one of which is Puppy Slacko 5.7.0. Following the report of the Shellshock vulnerability I have updated the installations and this appears to have fixed the problem for all of them apart from Puppy. Have other users found this, or have I done something wrong? The code I'm using to test for the vulnerability is as follows (cribbed from the avast! blog):

Code:

env x='() { :;}; echo vulnerable' bash -c "echo this is a test"

Cheers,

3g

OK, panic over. After a bit more research, I came across this thread:

http://www.murga-linux.com/puppy/viewtopic.php?t=95819

So I ran Puppy Package Manager (in Setup menu), put "bash" in the Find box and selected bash-4.2.050 for installation. After this, bash no longer appeared to exhibit the vulnerability :)