Linux bash vulnerability

[Ruby 9,039]

For you people out there running servers, this is kind of a big deal:

https://www.reddit.com/r/Ubuntu/comments/2hh7h4/a_new_bash_security_update_for_ubuntu_is_out/

There are updates for Ubuntu systems ready, just run sudo apt-get update && sudo apt-get upgrade && sudo apt-get dist-upgrade - it'll make your system happy. I suggest you also reboot it after that. Do it even if you've updated in the past 24 hours, as there's a new patch out.
 
- Your friendly neighbourhood conspirator.
 
(Edit: I forgot to include it in the title, but this also includes Mac OS X and Android phones. I don't know how to update there)

 

More info (especially for people with less experience with running things) can be found here: http://www.ibtimes.co.uk/what-shellshock-os-x-linux-bash-bug-that-could-be-bigger-heartbleed-1467201

[+Dr. Obvious 14,606]

Good to know. I'll have to poke some people about it.

 

 

- Your friendly neighbourhood conspirator.

*wears tinfoil hat*

You finally admit it? *nod nod nod*

[fever 9,884]

Good to know. I'll have to poke some people about it.

 

 

*wears tinfoil hat*

You finally admit it? *nod nod nod*

Pretty sure Mana will already be on it, good to raise awareness of it for people with less active servers or who are new to running servers.

[luop90 4,400]

What's the difference between "dist-upgrade" and "upgrade"? I have a script that executes both commands but it uses just "update".

[Ruby 9,039]

What's the difference between "dist-upgrade" and "upgrade"? I have a script that executes both commands but it uses just "update".

Basically,

 

apt-get update - updates the local cache so that the system knows if there are any updates

apt-get upgrade - doesn't change what packages are installed, just what version is

apt-get dist-upgrade - downloads any new packages added to the distribution (new dependencies, new kernel versions etc).

 

Pretty much any distribution will do that (and then some, like deleting old kernel versions and updating grub to reflect that) automatically for you if you're running it on your home computer but at least on my VPS I had to do it manually (though you can just set up a cron job to do it every day or two).

 

apt-get man page

[Canti 386]

I knew I should have gone with IIS

[Ruby 9,039]

I knew I should have gone with IIS