FIXED - unix/linux Bash: critical security hole

[eFestivals]

A major bug in linux system code was revealed yesterday - news of this is just starting to hit the mainstream media now.

The efestivals servers have just been patched with the relevant updates, so there shouldn't be any issues from that security problem here (fingers crossed).

[eFestivals]

...and i've just found out that this bug had existed for 22 years - and not a soul knew of the problem until yesterday. That's rather astounding!

Anyway, I've just double-checked things with some serious-techies, and the efestivals servers are indeed fixed. Phew!

[LondonTom]

...and i've just found out that this bug had existed for 22 years - and not a soul knew of the problem until yesterday. That's rather astounding!

From what I've said, it seems like it was something realtively simple to do (from the hackers POV) to but I guess maybe thats why it was overlooked

[eFestivals]

yep, it's incredibly simple to exploit - tho I doubt there's many webservers nowadays that are actually vulnerable to being exploited via that. It couldn't have been done on efests, for example.

[eFestivals]

There's been further patches for this bash bug issued since the patches yesterday - and the efests servers have been re-patched with those newer patches.