Bash specially-crafted environment variables code injection attack

[Jan Dušátko]

Zda se, ze to stale nekonci. Pribyly dalsi dva CVE zaznamy, tedy celkem uz
sest.
CVE-2014-6271 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6271
CVE-2014-6277 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6277
CVE-2014-6278 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6278
CVE-2014-7169 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-7169
CVE-2014-7186 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-7186
CVE-2014-7187 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-7187

Snazim se pochopit, kolik se toho bude tykat FreeBSD. Vse zalezi na tom,
kolik program vyuziva knihovny jako readline a libreadline

Honza