BASH - Is it flawed or are the press talkingnonsense

[Strata700]

Anyone know if the press hype about BASH is relevant in any way to our HDAs. Will lots of naughty persons unknown be able to walk in our front doors including pranksters, gangsters, nosey folks, schoolkids and the rest. If so is there a patch or do you just switch it off ?

[bigfoot65]

This has already been addressed and patched for Fedora 19. There should have been two updated from Fedora 19 and one from Amahi for hda-ctl.

As for Ubuntu, I know there was a OS patch for Debian but not sure if Ubuntu has done one. These are all controlled by the vendor, so Amahi has not control on when they update bash to correct the potential vulnerability.

[Strata700]

I did have a big tongue-in-cheek when asking but thanks for the response. Will it be obvious in the hda-updates.log for hda-ctl ? but which log should I peruse for the Fedora patch ?

Thanks

[bigfoot65]

Look in yum.log for F19. The Amahi update does nothing other than ensure the updated OS package is installed.

This is an OS issue not Amahi.

[ Post made via Android ]

[Strata700]

Sorry if I offended the 'team' I wasn't suggesting it was an Amahi problem just my ignorance on the relationship between BASH which is the CLI whether its pure AMAHI or pure Fedora19. So wasn't sure therefore if the perceived problem would affect the HDA in anyway which needed addressing through AMAHI because of your customisation of Fedora to provides us with an HDA.

Hope I'm not blacklisted now

[bigfoot65]

No worries.

Just wanted to clarify where the solution to the problem lies.

[ Post made via Android ]

[hypertense]

For those that are running Amahi on older versions of Fedora (I'm on F14 as some of the apps I use are not available or working properly on F19) you can update bash quite easily by following this link: how to manually update bash to patch shellshock bug.