Re: cygwin bash and Shellshock / CVE-2014-6271 & CVE-2014-7169

2014-09-26 Thread Eric Blake
On 09/26/2014 01:33 PM, Richard DeFuria wrote: > Hello, > > I downloaded the latest setup and installed the latest packages on my Win8.1 > x64 box. > > It seems as though my cygwin bash shell has been patched against > CVE-2014-6271 as per: > $ env x='() { :;}; echo vulnerable' bash -c "ech

Re: cygwin bash and Shellshock / CVE-2014-6271 & CVE-2014-7169

2014-09-26 Thread Marco Atzeri
On 26/09/2014 21:33, Richard DeFuria wrote: Hello, I downloaded the latest setup and installed the latest packages on my Win8.1 x64 box. It seems as though my cygwin bash shell has been patched against CVE-2014-6271 as per: $ env x='() { :;}; echo vulnerable' bash -c "echo this is a t

cygwin bash and Shellshock / CVE-2014-6271 & CVE-2014-7169

2014-09-26 Thread Richard DeFuria
Hello, I downloaded the latest setup and installed the latest packages on my Win8.1 x64 box. It seems as though my cygwin bash shell has been patched against CVE-2014-6271 as per: $ env x='() { :;}; echo vulnerable' bash -c "echo this is a test" bash: warning: x: ignoring function