This is a static archive of the old Zorin Forum.

The information below may be outdated. Visit the new Zorin Forum here ›

If you have registered on the old forum, you will need to create an account on the new forum.

Old Zorin Forum archive → How-tos and Tutorials

Important News !!!! [ 'Bash' bug ] aka: [ Shellshock ]

Anonymous

Thu Sep 25, 2014 2:55:30 pm

I thought this was important enough to post globally for a short period of time.
Since the subject involved Apple/Linux !!!!



A major security flaw that could affect Apple's Mac and Linux operating systems has been discovered, with security experts claiming it to be more dangerous than the recent Heartbleed bug.



Link : http://www.cnbc.com/id/102031989?__sour ... ar=xfinity


Link : http://www.bbc.com/news/technology-29361794


Link : https://news.ycombinator.com/item?id=8365110


Link: http://thehackernews.com/2014/09/bash-s ... shock.html


Link : http://sourcedigit.com/12872-update-pat ... os-system/


Link : http://sourcedigit.com/12870-check-linu ... shell-bug/

Jesse

Thu Sep 25, 2014 3:00:36 pm

Gizmuntu wrote:I thought this was important enough to post globally for a short period of time.
Since the subject involved Apple/Linux !!!!


Users have been urged to "patch" or update their OS to protect against the bug by the United States Computer Emergency Readiness Team (US-CERT), part of the Department of Homeland Security.


I assume it has but can anyone confirm this has been addressed in our security updates?

Anonymous

Thu Sep 25, 2014 3:55:06 pm

To check if your ok !!!! [ Security Updates ]

Open Terminal :

>>> CTRL + ALT + T <<<


Enter : dpkg -s bash | grep Version


The correct pachage for your version of Zorin OS 6/9 below !!!!


Zorin OS 9 :

bash 4.3-7ubuntu1.1

Zorin OS 6 :

bash 4.2-2ubuntu2.2


IF you do not have either of the above !!!!

Enter : sudo apt-get update && sudo apt-get install bash

To be safe...check again !!!!

Enter : Enter : dpkg -s bash | grep Version


Moderators :
Add/change to this thread as needed !!!! [ Corrections ]
I have 999 projects going on at once.
Sometime I leave things out !!!! :D :D


Regards
Gizzy

dougzak

Thu Sep 25, 2014 11:25:12 pm

Thanks for your very clear instructions on how to check one's system. I am relieved to see that it has been fixed so quickly.

Regards,

Dougzak

Swarfendor437

Thu Sep 25, 2014 11:48:07 pm

I think the best article on this issue is the following:

http://www.techradar.com/news/software/ ... -1266890/1

What is interesting to note is that home/desktop users would appear to be less prone to the attack as they tend to update their systems as notifications come through - the above article seems to indicate that the main vector of attack are servers and sloppy admins (same old, same old)! :D

Swarfendor437

Fri Sep 26, 2014 10:31:37 am

Be sure to install your updates TODAY!

swarfendor437@zorin932ultimate:~$ dpkg -s bash | grep Version
Version: 4.3-7ubuntu1.3

Just got the notification.

sonny

Fri Sep 26, 2014 3:12:03 pm

What about Zorin 8? It has Bash version - 4.2-5ubuntu3
I also have zorin 9 installed but most of my stuff is currently on zorin 8.

Swarfendor437

Sat Sep 27, 2014 10:40:08 pm

8 is no longer supported - just like XP! :D

2nd update:

swarfendor437@zorin932ultimate:~$ dpkg -s bash | grep Version

Version: 4.3-7ubuntu1.4

Updated today 27.9.2014!!!

Jesse

Mon Sep 29, 2014 11:56:30 pm

Swarfendor437 wrote:Version: 4.3-7ubuntu1.4


Got it. Thanks.

Jesse

kb50

Mon Oct 13, 2014 11:19:44 pm

Mine comes up today as Version 4.3-7 Ubnuntu 1.5

which is ahead of 1.1 so I guess I am ok, and if yours matches this should also be. I saw a few days ago a bash update coming down in the auto-updater. That explains it

See previous post for how to check it in terminal.
.