Shellshock

Support section for FREESCO v0.4.x

Shellshock

Postby PurpleMeanie » Thu Sep 25, 2014 4:17 am

Can I safely assume that this Bash "shellshock" bug is not relevant to Freesco as there is no Bash?

http://www.theregister.co.uk/2014/09/24 ... hell_vuln/


No Heartbleed bug, no Shellshock bug... Freesco seems to keep missing out on all the security dramas :mrgreen:
User avatar
PurpleMeanie
Junior Member
 
Posts: 34
Joined: Tue Apr 22, 2003 10:05 pm
Location: Brighton, UK

Re: Shellshock

Postby Lightning » Thu Sep 25, 2014 6:01 pm

You are correct, the stock system is immune to this problem. However if you have the bash package installed then it is not. This can be worked around by removing or renaming the /usr/bin/env binary when bash is installed.

I will look into updating bash for the package.
If you are afraid that you might make a mistake. The chances are high that you will never learn anything.
User avatar
Lightning
FREESCO GOD !!
 
Posts: 12079
Joined: Wed Nov 14, 2001 6:50 am
Location: Oregon, USA

Re: Shellshock

Postby PurpleMeanie » Fri Sep 26, 2014 5:37 am

One of the things I have loved about Freesco's Floppynix is that the floppy size has meant you have kept to that ancient kernel and only what is vital for the router. Which has therefore meant we have all been sitting here laughing at Heartbleed and Shellshock bugs while the rest of the *nix community goes into a flap.

Being restricted to floppy sized has actually become a "security feature". :D
User avatar
PurpleMeanie
Junior Member
 
Posts: 34
Joined: Tue Apr 22, 2003 10:05 pm
Location: Brighton, UK


Return to FREESCO Support for v0.4.x

Who is online

Users browsing this forum: No registered users and 2 guests

cron