Linux delegates - update bash to evade shellshock vulnerability!

Started by R2, September 25, 2014, 06:06:40 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

R2

Excellent response guys, if anyone hasn't looked into patching this, please do.
It might not have a massive impact on bitshare dacs, but it's better safe than sorry.

coolspeed

Please vote for  delegate.coolspeed    dac.coolspeed
BTS account: coolspeed
Sina Weibo:@coolspeed

coolspeed

Please vote for  delegate.coolspeed    dac.coolspeed
BTS account: coolspeed
Sina Weibo:@coolspeed

CoinHoarder

[url="https://www.decentralized.tech/"]https://www.decentralized.tech/[/url] -> Market Data, Portfolios, Information, Links, Reviews, Forums, Blogs, Etc.
[url="https://www.cryptohun.ch/"]https://www.cryptohun.ch/[/url] -> Tradable Blockchain Asset PvP Card Game

R2

Quote from: cube on September 26, 2014, 02:37:16 AM
Quote from: cryptillionaire on September 25, 2014, 06:06:40 PM
http://arstechnica.com/security/2014/09/concern-over-bash-vulnerability-grows-as-exploit-reported-in-the-wild/
Aparantley this has a huge impact on linux/unix/osx servers with bash installed; if you've got it installed, please update it and keep ontop of this news!

Updated to patched bash.

I do not see it as much of a threat. The exploit only works if a delegate is using shared hosting or running services such as Web server which has bash escape.  I doubt any delegate would do that.
Shared hosting like 2 cores out of 16 on a cloud provider? Cause I see that as quite a likely scenario.
Either way, best to be safe and patch it ;D

cube

Quote from: cryptillionaire on September 25, 2014, 06:06:40 PM
http://arstechnica.com/security/2014/09/concern-over-bash-vulnerability-grows-as-exploit-reported-in-the-wild/
Aparantley this has a huge impact on linux/unix/osx servers with bash installed; if you've got it installed, please update it and keep ontop of this news!

Updated to patched bash.

I do not see it as much of a threat. The exploit only works if a delegate is using shared hosting or running services such as Web server which has bash escape.  I doubt any delegate would do that.
ID: bitcube
bitcube is a dedicated witness and committe member. Please vote for bitcube.

maqifrnswa

I think this does it:
http://ftp.gnu.org/gnu/bash/bash-4.3-patches/bash43-025

I think most distros already pushed fixes, maybe they just haven't propagated yet
maintains an Ubuntu PPA: [url="https://launchpad.net/~showard314/+archive/ubuntu/bitshares"]https://launchpad.net/~showard314/+archive/ubuntu/bitshares[/url] [15% delegate] wallet_account_set_approval maqifrnswa true [50% delegate] wallet_account_set_approval delegate1.maqifrnswa true

toast

I think there's not a patch that completely fixes it out yet
Do not use this post as information for making any important decisions. The only agreements I ever make are informal and non-binding. Take the same precautions as when dealing with a compromised account, scammer, sockpuppet, etc.

liondani

updated before 1-2 days bash....
Now I realize how important it is to update in  daily base!
[url="https://www.steempeak.com/@liondani"]https://www.steempeak.com/@liondani[/url]

R2

http://arstechnica.com/security/2014/09/concern-over-bash-vulnerability-grows-as-exploit-reported-in-the-wild/
Aparantley this has a huge impact on linux/unix/osx servers with bash installed; if you've got it installed, please update it and keep ontop of this news!