Harry Putnam <[email protected]> writes:
> The Wanderer <[email protected]> writes:
>
>> I have (trimmed for brevity):
>>
>> ========
>> $ apt-cache policy bash
>> bash:
>> Installed: 4.3-9.1
>>
>> $ bash --version
>> GNU bash, version 4.3.25(1)-release (x86_64-pc-linux-gnu)
>> ========
Egad I neglected to post this below above
x='() { :;}; echo VULNERABLE' bash -c :
VULNERABLE
or
env x='() { :;}; echo vulnerable' bash -c 'echo hello'
vulnerable
hello
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
Archive: https://lists.debian.org/[email protected]
