[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Shellshock: Has CVE-2014-7186 and CVE-2014-7187 been addressed for debian

On Sat, 27 Sep 2014, john wrote:
> I was wondering if CVE-2014-7186 and CVE-2014-7187 been addressed yet for
> Debian. I note that Ubuntu pushed another patch addressing these earlier
> today.

Yes, both are addressed by DSA-3035-1.  AFAIK, these CVE numbers were not
yet assigned at the time of the upload, so they were not mentioned in the

  "One disk to rule them all, One disk to find them. One disk to bring
  them all and in the darkness grind them. In the Land of Redmond
  where the shadows lie." -- The Silicon Valley Tarot
  Henrique Holschuh

Reply to: