Re: bash-2.05b-013 appears to not work

2014-10-17 Thread Dave Kalaluhi
Awesome - Thanks everyone for the help! I will forward these responses on to the security group. But again, Thank you everyone!!! -Dave On 10/17/14, Andreas Schwab wrote: > Eric Blake writes: > >> The following is a better test for whether CVE-2014-7187 can be >> exploited to remotely attack yo

Re: bash-2.05b-013 appears to not work

2014-10-17 Thread Dave Kalaluhi
quot; If we run the test via ssh, it is showing patched, however locally is still showing vulnerable. Thanks Eric, Dave On 10/16/14, Chet Ramey wrote: > On 10/16/14, 5:02 PM, Dave Kalaluhi wrote: >> We have been compiling some of the older versions of bash to fix >> vulnerab

bash-2.05b-013 appears to not work

2014-10-16 Thread Dave Kalaluhi
We have been compiling some of the older versions of bash to fix vulnerabilities, and for the most, has been working. However, when we patch the 013 patch for CVE-2014-7187, and run the nested loop, it's still showing as vulnerable. Has anyone else had a similiar experience? Thanks for the help,