Home / server / Questions / 631812
Accepted
Daniel Cukier
Asked: 2014-09-28 13:20:50 +0800 CST

Shellshock protection in Rackspace Ubuntu

  • 772

I am trying to update my Ubuntu 13.10 servers in Rackspace to avoid Shellshock bug, but it is not working. Here is what I am doing:

$ sudo apt-get update && sudo apt-get install --only-upgrade bash

it says:

bash is already the newest version.
0 upgraded, 0 newly installed, 0 to remove and 35 not upgraded.

$ env VAR='() { :;}; echo Bash is vulnerable!' bash -c "echo Bash Test"
Bash is vulnerable!
Bash Test

What I am doing wrong?

ubuntu

1 Answers

  1. Best Answer

    Please make sure you are on a supported version of Ubuntu!

    Anything that is EOL does not receive the bash update, as far as I'm aware. If you are on Ubuntu 14.04, you should receive the update.

    Anything like 13.10, however, does not from what I can tell. Please upgrade Ubuntu and then update try updating bash, that will hopefully help!

    • 1