shellshock bash vulnerability

[Steve Song]

Hi all,

Many of you may have read about the newly discovered bash vulnerability that has received the catchy name of "shellshock".

http://www.theregister.co.uk/2014/09/24/bash_shell_vuln/

If you run linux or have an apple computer, you should run an update now.  Village Telco servers have been updated with a new version of bash which blocks this exploit.  Of course, as with heartbleed, we can't really know whether this has previously been used to exploit existing systems.  

As for firmware, OpenWrt users don't need to worry too much as the default shell in OpenWrt is ash not bash.  If you have installed bash on your firmware, you should follow the OpenWrt alerts about updating it.

Cheers... Steve

--
Steve Song

http://villagetelco.org