Re: [Astlinux-users] Bash vulnerability

2014-09-26 Thread Michael Knill
ick Sent from my mobile device. Please excuse my brevity. -Original Message- From: Michael Knill [michael.kn...@ipcsolutions.com.au] Received: Friday, 26 Sep 2014, 5:59PM To: AstLinux Users Mailing List [astlinux-users@lists.sourceforge.net] Subject: [Astlinux-users] Bash vulnerability M

Re: [Astlinux-users] Bash vulnerability

2014-09-26 Thread Darrick Hartman
olutions.com.au] Received: Friday, 26 Sep 2014, 5:59PM To: AstLinux Users Mailing List [astlinux-users@lists.sourceforge.net] Subject: [Astlinux-users] Bash vulnerability My customers are asking me if Astlinux suffers from this vulnerability and what the risks are. >From my reading so far,

Re: [Astlinux-users] Bash vulnerability

2014-09-26 Thread Lonnie Abelbeck
Hi Michael, In general, it looks like AstLinux is secure against "Shellshock", given a couple days of investigating. Though, without getting into details, a custom DHCP configuration could possibly be exploited given malicious DHCP endpoints. We are busy preparing AstLinux 1.2.0 with the bash

[Astlinux-users] Bash vulnerability

2014-09-26 Thread Michael Knill
My customers are asking me if Astlinux suffers from this vulnerability and what the risks are. From my reading so far, it is. Can anyone confirm the risks and mitigations until the new Astlinux version comes. Regards Michael Knill ---