From owner-freebsd-security@FreeBSD.ORG Fri Sep 26 16:29:48 2014 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 6F4C84D0 for ; Fri, 26 Sep 2014 16:29:48 +0000 (UTC) Received: from smtp-vbr5.xs4all.nl (smtp-vbr5.xs4all.nl [194.109.24.25]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id E642F1FF for ; Fri, 26 Sep 2014 16:29:47 +0000 (UTC) Received: from vromage.erje.net (erje.net [80.126.62.176]) by smtp-vbr5.xs4all.nl (8.13.8/8.13.8) with ESMTP id s8QGTiaj027942 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Fri, 26 Sep 2014 18:29:45 +0200 (CEST) (envelope-from robert@ml.erje.net) Received: from ismet.erje.net (ismet.erje.net [IPv6:2001:888:1f33::8e45:5e]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by vromage.erje.net (PostFix 2.11.0) with ESMTPS id 3j4JVv4Lnbz7gL3 for ; Fri, 26 Sep 2014 18:29:43 +0200 (CEST) DKIM-Filter: OpenDKIM Filter v2.8.3 vromage.erje.net 3j4JVv4Lnbz7gL3 Date: Fri, 26 Sep 2014 18:29:38 +0200 From: Robert Joosten To: freebsd-security@freebsd.org Subject: Re: Bash ShellShock bug(s) Message-ID: <20140926162937.GA48704@ismet.erje.net> References: <542416C0.2040203@tefre.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <542416C0.2040203@tefre.com> User-Agent: Mutt/1.5.23 (2014-03-12) X-Virus-Scanned: by XS4ALL Virus Scanner X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Sep 2014 16:29:48 -0000 Hi, > Yes, bash is just a port in FreeBSD, but: What about /bin/sh ? Regards, Robert