see also discussion at https://bugzilla.redhat.com/show_bug.cgi?id=1141597
there is a fix and a fix to the fix, two CVE:
CVE-2014-6271 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6271 https://security-tracker.debian.org/tracker/CVE-2014-6271
CVE-2014-7169 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7169 https://security-tracker.debian.org/tracker/CVE-2014-7169
Journal linuxfr http://linuxfr.org/users/tankey/journaux/mets-a-jour-ton-bash-maintenant
suivre sur touitteure: https://twitter.com/hashtag/shellshock
(MS) http://www.troyhunt.com/2014/09/everything-you-need-to-know-about.html
scanner http://blog.erratasec.com/2014/09/bash-shellshock-scan-of-internet.html
shellshock pour les nuls http://blog.ippon.fr/2014/09/26/shell-shock-un-obus-dans-les-dents-de-bash/
more bash bugs http://lcamtuf.blogspot.fr/2014/09/bash-bug-apply-unofficial-patch-now.html
Shellshocker - Repository of "Shellshock" Proof of Concept Code - https://github.com/mubix/shellshocker-pocs
X-force http://securityintelligence.com/how-bash-shellshock-bug-couldve-been-avoided-7-years-ago/
