Shellshock

[PurpleMeanie]

Can I safely assume that this Bash "shellshock" bug is not relevant to Freesco as there is no Bash?

http://www.theregister.co.uk/2014/09/24 ... hell_vuln/


No Heartbleed bug, no Shellshock bug... Freesco seems to keep missing out on all the security dramas

[Lightning]

You are correct, the stock system is immune to this problem. However if you have the bash package installed then it is not. This can be worked around by removing or renaming the /usr/bin/env binary when bash is installed.

I will look into updating bash for the package.

[PurpleMeanie]

One of the things I have loved about Freesco's Floppynix is that the floppy size has meant you have kept to that ancient kernel and only what is vital for the router. Which has therefore meant we have all been sitting here laughing at Heartbleed and Shellshock bugs while the rest of the *nix community goes into a flap.

Being restricted to floppy sized has actually become a "security feature".