BASH exploit - Shellshock

wtriba wrote:

schmitzm wrote: @GibsonLP - I understand the latest beta addresses the issue - it would be nice to have confirmation that the beta includes both of the patches to bash though. Following your writeup, I have managed to cross-build patched bash-3.2 and bash-2.05b binaries - I'll still need to run the testsuites from the source distribution to feel confident enough to replace the old binary. I'm definitely interested in the 2.05b binary for my NV+. If/when you're going to make that available, I'd love to get a copy. Thanks!

Running the testsuite on both 2.05b and 3.2 bash binaries reveals that cross compiling bash is a bit tricky. Job control is missing, among other features.

I'll try to fudge a few of these configure tests, but really, you may be better off trying the beta firmware image posted on Thursday.