Re: Shellshock: Has CVE-2014-7186 and CVE-2014-7187 been addressed for debian
On Sat, 27 Sep 2014, john wrote:
> I was wondering if CVE-2014-7186 and CVE-2014-7187 been addressed yet for
> Debian. I note that Ubuntu pushed another patch addressing these earlier
> today.
Yes, both are addressed by DSA-3035-1. AFAIK, these CVE numbers were not
yet assigned at the time of the upload, so they were not mentioned in the
changelog.
--
"One disk to rule them all, One disk to find them. One disk to bring
them all and in the darkness grind them. In the Land of Redmond
where the shadows lie." -- The Silicon Valley Tarot
Henrique Holschuh
Reply to: