Hacker News Reader

Parent Full thread

willvarfar

Ancient news! It was found - and fixed - over a month ago now :)

This was one of a spate of bugs found when people started poking Bash's parsing.

This particular bug was found by Michał Zalewski.

http://en.m.wikipedia.org/wiki/Shellshock_(software_bug) has a list of the vulnerabilities found (so far).

View on HN

Obviously wasn't a month ago (https://news.ycombinator.com/item?id=8432826), but yeah, it's not exactly fresh.

Thx for the correction and nice work finding it :)

I certainly recalled it from back in shellshock days, but was mislead by the filing date on the advisory. Why on earth do they have wrong dates on things?

Reply on news.ycombinator.com