7 ms·

How about installing zsh and making that the default shell? Is that enough?

• dylukes 12y ago
  zsh is also vulnerable. (it's a bash derivative)
  • brians 12y ago
    Can you show example code exploiting zsh? I haven't seen such, nor found such: » V='() { :; }; echo busted' zsh -c "echo hi" hi But: » V='() { :; }; echo busted' bash -c "echo hi" busted hi
  • Glan1984 12y ago
    https://security.stackexchange.com/questions/68146/how-do-i-secure-apache-against-the-bash-shellshock-vulnerability https://security.stackexchange.com/questions/68146/how-do-i-...
  • bodyfour 12y ago
    That's incorrect; it does not appear to have the "export function" feature that this bug relies on.