dhis2-devs-core team mailing list archive

[Dan <dan@xxxxxxxxxxxx>]

Hi Bob,

Yes, it’s pretty serious most Linux distros already have a patch in place, I recommend everyone using Linux at the very least update bash to the latest version. There is a simple command you can run to check if your system is vulnerable 
env x='() { :;}; echo vulnerable' bash -c "echo this is a test"

If the result is the following you are patched
---
bash: warning: x: ignoring function definition attempt
bash: error importing function definition for `x'
this is a test
—

If you get the following you need to update:
----
vulnerable
this is a test
----


Dan Cocos
BAO Systems
www.baosystems.com
T: +1 202-352-2671 | skype: dancocos

On Sep 25, 2014, at 6:56 PM, Bob Jolliffe <bobjolliffe@xxxxxxxxx> wrote:

> Has anybody had a chance to evaluate this yet?
> -- 
> Mailing list: https://launchpad.net/~dhis2-devs-core
> Post to     : dhis2-devs-core@xxxxxxxxxxxxxxxxxxx
> Unsubscribe : https://launchpad.net/~dhis2-devs-core
> More help   : https://help.launchpad.net/ListHelp