On: CVE-2014-6271: Remote code execution through bash

[chjj]

    $ x='() { :;}; echo vulnerable' bash -c 'echo test'
    vulnerable
    test
    $ pacman -Syu
    ...
    $ x='() { :;}; echo vulnerable' bash -c 'echo test'
    bash: warning: x: ignoring function definition attempt
    bash: error importing function definition for `x'
    test

Benefits of using an OS with a real package manager.

[tinco → chjj]

Just don't turn it off after you've ran `pacman -Syu`, it will never boot again ;)

[thevdude → tinco]

I know you're just teasing, but I've got a machine with an arch install from over two years ago that's still running great. Just did an -Syyu to get bash updated.

[antocv → thevdude]

The trick is to keep up with the updates, do pacman -Syu every two weeks or so, and not wait months.

[alexbecker → tinco]

After it happened 5 times in a row, I finally just aliased pacman -Syu to "breakX".