Re: [Tails-dev] Bash bug

2014-09-24 Thread Jacob Appelbaum
On 9/24/14, anonym wrote: > 25/09/14 01:02, Jurre van Bergen wrote: >> >> Dear Tails users, >> >> As you might have heard there is a Bash vulnerability, I have created a >> temporary countermeasure write-up below. > > Out of curiosity, have you (or any one else for that matter) come up > with a re

Re: [Tails-dev] Bash bug

2014-09-24 Thread Jurre van Bergen
Seems the Debian patch wasn't good enough, Tavis Ormandy wrote a bypass. (https://twitter.com/taviso/status/514887394294652929) Act with caution! Jurre On 09/25/2014 01:02 AM, Jurre van Bergen wrote: > > Dear Tails users, > > As you might have heard there is a Bash vulnerability, I have created

Re: [Tails-dev] Bash bug

2014-09-24 Thread anonym
25/09/14 01:02, Jurre van Bergen wrote: > > Dear Tails users, > > As you might have heard there is a Bash vulnerability, I have created a > temporary countermeasure write-up below. Out of curiosity, have you (or any one else for that matter) come up with a relevant exploit in Tails? I suppose I'

[Tails-dev] Bash bug

2014-09-24 Thread Jurre van Bergen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Dear Tails users, As you might have heard there is a Bash vulnerability, I have created a temporary countermeasure write-up below. Temporary countermeasure Debian has provided an updated version, we recommend you to upgrade to th