0

I updated bash on September 26th to protect against the ShellShock vulnerability. I have heard a rumour that further vulnerabilities have been reported, but another yum -y update bash just now (1600 UTC on October 2nd) said No packages marked for update.

Also the test: env X="() { :;} ; echo vulnerable" bash -c "echo safe" reported safe

Is this rumour just a scare to persuade me to buy some software, or is there genuinely a threat, and if so, please, what further can I do about it?

I use Fedora 20 on a home computer and a couple of laptops, nothing fancy like a server or whatever.


I have followed up the reference, thank you for that, but it is still not clear to me if the vulnerabilities have been removed form the bash in my machines, in other words is there still something more I (and everybody who might be affected) should do?

marked as duplicate by Stéphane Chazelas, Mat, Ramesh, strugee, jasonwryan Oct 2 '14 at 17:02

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

Browse other questions tagged or ask your own question.