Re: [Dnsmasq-discuss] Shellshock.

2014-09-27 Thread Lonnie Abelbeck
On Sep 27, 2014, at 7:01 AM, Matthias Andree wrote: > Am 27.09.2014 um 12:01 schrieb Roy Marples: >> On Friday 26 Sep 2014 21:14:20 Simon Kelley wrote: >>> This is just a heads-up that if you're using the --dhcp-script option in >>> dnsmasq, and the script you're calling is being interpreted by

Re: [Dnsmasq-discuss] Shellshock.

2014-09-27 Thread Matthias Andree
Am 27.09.2014 um 12:01 schrieb Roy Marples: > On Friday 26 Sep 2014 21:14:20 Simon Kelley wrote: >> This is just a heads-up that if you're using the --dhcp-script option in >> dnsmasq, and the script you're calling is being interpreted by bash, >> then you're affected by the shellshock bug. >> >> T

Re: [Dnsmasq-discuss] Shellshock.

2014-09-27 Thread Roy Marples
On Friday 26 Sep 2014 21:14:20 Simon Kelley wrote: > This is just a heads-up that if you're using the --dhcp-script option in > dnsmasq, and the script you're calling is being interpreted by bash, > then you're affected by the shellshock bug. > > The bug allows execution of arbitrary code containe

Re: [Dnsmasq-discuss] Shellshock.

2014-09-27 Thread Simon Kelley
On 26/09/14 22:45, richardvo...@gmail.com wrote: > I know this could be found in the code, and my own systems have busybox not > bash, but I thought I'd ask for general interest: > > Is this a matter only of the shebang line in the script, or does dnsmasq > use `system()` to run it, meaning that c