On Mon, Sep 29, 2014 at 01:09:19PM -0500, Sharon Zastre wrote: > Is it safe to assume that a fix/patch/upgrade will become available to address the shellshock vulnerability? Yes, but not in apache. The vulnerability dubbed "shellshock" is a flaw in bash and patches and upgrades are already widely available for bash. Upgrade or patch your bash installations now. It is not a flaw in apache. Apache is simply a network-enabled channel through which exploitative payloads may be delivered to unpatched installations of bash (one of many such channels). Pete -- Openstrike - improving business through open source http://www.openstrike.co.uk/ or call 01722 770036 / 07092 020107
Attachment:
pgpBNxwbNxJC7.pgp
Description: PGP signature
|