Re: [MiNT] bash

[Peter Slegg <p.slegg@scubadivers.co.uk>]

On Mon, 29 Sep 2014 21:18:26 , Vincent Rivière <vincent.riviere@freesbee.fr> wrote:
> On 25/09/2014 21:19, Peter Slegg wrote:
> > bash vulnerability
> >
> > http://www.theregister.co.uk/2014/09/24/bash_shell_vuln/
> >
> > env X="() { :;} ; echo busted" /bin/sh -c "echo completed"
> > env X="() { :;} ; echo busted" `which bash` -c "echo completed"
>
> Fixed!
>
> You can get bash 4.3.27 there:
> http://vincent.riviere.free.fr/soft/m68k-atari-mint/archives/mint/bash/
>
> You Atari computer will not have to fear Shellshock anymore :-)
>

I think I have installed the 020-060 version properly but I still
get the error from the first line of the test script which I don't
understand:

bash-4.3# bash --version
GNU bash, version 4.3.27(1)-release (m68k-atari-mint)
Copyright (C) 2013 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>

This is free software; you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

bash-4.3# env X="() { :;} ; echo busted" /bin/sh -c "echo completed"
busted
completed


The second line seems to work:

bash-4.3# env X="() { :;} ; echo busted" `which bash` -c "echo completed"
completed

Have I misunderstood something ?

Peter