Re: [bug-gawk] Question regarding security of gawk CGI scripts

[Miriam English]

I'm not an expert in this so I could easily be wrong, but I'd got the 
impression that this security flaw was a result of a vulnerability in 
bash. The patches for bash v4.3 that fix this are up at:
https://ftp.gnu.org/gnu/bash/bash-4.3-patches/
all 30 of them!, so I guess v4.4 will be released in the near future.

I thought Apache used bash to run programs, though as I say, I'm no 
expert so I may well be wrong. I'd been told that systems using a 
different shell (csh, ksh, zsh, ash, etc) remained safe.


--
If you don't have any failures then you're not trying hard enough.
 - Dr. Charles Elachi, director of NASA's Jet Propulsion Laboratory
-----
Website: http://miriam-english.org
Blogs:   http://miriam-e.dreamwidth.org
         http://miriam-e.livejournal.com