ROSAForum

Код: Выделить всё

[sylvain@Rosa2014Fresh ~]$ rpm -qa | grep bash
bash-4.3-5-rosa2014.1.x86_64
bash-completion-2.1-13-rosa2014.1.noarch
[sylvain@Rosa2014Fresh ~]$ 

Код: Выделить всё

[gerard@localhost ~]$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
vulnerable
this is a test

Код: Выделить всё

[gerard@localhost ~]$ bash --version
GNU bash, version 4.3.0(1)-release (x86_64-unknown-linux-gnu)
Copyright (C) 2013 Free Software Foundation, Inc.
Licence GPLv3+ : GNU GPL version 3 ou ultérieure <http://gnu.org/licenses/gpl.html>

This is free software; you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
[gerard@localhost ~]$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
this is a test

Код: Выделить всё

$ rpm -qa --last | grep '28 sept. 2014'
bash-4.2-11.3-rosa2012.1.i586                 dim. 28 sept. 2014 04:17:39 CEST

Код: Выделить всё

$ bash --version
GNU bash, version 4.2.37(2)-release (i586-unknown-linux-gnu)
Copyright (C) 2011 Free Software Foundation, Inc.
Licence GPLv3+ : GNU GPL version 3 ou ultérieure <http://gnu.org/licenses/gpl.html>

Ceci est un logiciel libre ; vous être libre de le modifier et de le redistribuer.
Aucune garantie n'est fournie, dans la mesure de ce que la loi autorise.

$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
this is a test