<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 2014/09/25 14:54, Steven Campbell
wrote:<br>
</div>
<blockquote
cite="mid:32C2B7B9FC548345980779B3F51F1A4233867F37@mailbox-san.poole.gov.uk"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<meta name="Generator" content="Microsoft Word 12 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Arial","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span
style="font-family:"Arial","sans-serif"">Hi
all<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-family:"Arial","sans-serif"">Does
anyone know if QGIS is affected at all by the bash bug?</span></p>
</div>
</blockquote>
Linux is affected by this bug, not QGIS.<br>
So if you're running Linux, then yes, you may be affected.<br>
<br>
You can check by opening a terminal window, and running this (cut
& paste it into the window:<br>
<br>
<blockquote>env x='() { :;}; echo vulnerable' bash -c 'echo hello'<br>
</blockquote>
If you get the "Vulnerable" echo from this, then yes, your version
of bash has the bug.<br>
<br>
You can fix this by updating to the latest bash version.<br>
<blockquote>sudo apt-get update && sudo apt-get install bash<br>
</blockquote>
(Debian based Linux assumed, eg: Ubuntu)<br>
<br>
After running this, rerun the "env" line above to see if it is
fixed.<br>
If still buggy, then you probably have an older version of linux, so
you'll have to download bash and recompile it on your system. (or
upgrade to a newer linux, then add the newest bash using the above
apt-get......)<br>
<br>
To recompile bash, you'll need build-essentials installed. If you
have an older (no longer supported linux, you may be up against a
wall if you can't run gcc & make), but assuming your installed
linux version already has gcc, make etc installed, run the
following:<br>
<br>
<blockquote>mkdir src<br>
cd src<br>
wget <a class="moz-txt-link-freetext" href="http://ftp.gnu.org/gnu/bash/bash-4.3.tar.gz">http://ftp.gnu.org/gnu/bash/bash-4.3.tar.gz</a><br>
#download all patches<br>
for i in $(seq -f "%03g" 0 25); do wget
<a class="moz-txt-link-freetext" href="http://ftp.gnu.org/gnu/bash/bash-4.3-patches/bash43-$i">http://ftp.gnu.org/gnu/bash/bash-4.3-patches/bash43-$i</a>; done<br>
tar zxvf bash-4.3.tar.gz <br>
cd bash-4.3<br>
#apply all patches<br>
for i in $(seq -f "%03g" 0 25);do patch -p0 < ../bash43-$i;
done<br>
#build and install<br>
./configure && make && make install<br>
cd .. <br>
cd ..<br>
rm -r src<br>
</blockquote>
Then reboot (to be safe all previous bash shells have closed) and of
course run the "env....." command to see if your bug has gone away.<br>
<br>
<br>
Disclaimer:<br>
<blockquote>I got this methodology from
<a class="moz-txt-link-freetext" href="http://askubuntu.com/questions/528101/what-is-the-cve-2014-6271-bash-vulnerability-and-how-do-i-fix-it">http://askubuntu.com/questions/528101/what-is-the-cve-2014-6271-bash-vulnerability-and-how-do-i-fix-it</a><br>
<br>
My one linux box is current and the apt-get install bash fixed the
problem.<br>
My server is still running an older outdated linux, and the above
compile-install DID work on it.<br>
<br>
You use this methodology at your own risk - but it worked on both
my linux boxes (this morning).<br>
<br>
</blockquote>
Hope this helps.<br>
Regards,<br>
Zoltan<br>
<br>
<br>
<br>
<br>
<blockquote
cite="mid:32C2B7B9FC548345980779B3F51F1A4233867F37@mailbox-san.poole.gov.uk"
type="cite">
<div class="WordSection1">
<p class="MsoNormal"><span
style="font-family:"Arial","sans-serif""><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-family:"Arial","sans-serif"">Thanks<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-family:"Arial","sans-serif"">Steve<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span
style="font-family:"Arial","sans-serif";color:#00A2B2">Steve
Campbell</span></b><b><span
style="font-family:"Arial","sans-serif";color:#004186"></span></b><b><span
style="font-family:"Arial","sans-serif"">|<span
style="color:#004186">
</span>GIS Manager<o:p></o:p></span></b></p>
<p class="MsoNormal"><span
style="font-family:"Arial","sans-serif"">Corporate
Strategy and Communications<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-family:"Arial","sans-serif"">Borough
of Poole | Civic Centre | Poole BH15 2RU<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-family:"Arial","sans-serif"">Tel:
01202 633 362<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-family:"Arial","sans-serif"">Email:
<a moz-do-not-send="true"
href="mailto:s.campbell@poole.gov.uk">
s.campbell@poole.gov.uk</a><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-family:"Arial","sans-serif"">Website:<a
moz-do-not-send="true"
href="http://www.boroughofpoole.com/">www.boroughofpoole.com</a><o:p></o:p></span></p>
<p class="MsoNormal"><b><i><span
style="font-family:"Arial","sans-serif";color:#00A2B2">Think
Green! Please Recycle<o:p></o:p></span></i></b></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
DISCLAIMER: This email and any files transmitted with it may be
confidential, legally privileged and protected in law and are
intended solely for the use of the individual to whom it is
addressed. The copyright in all documentation is the property of
the Borough of Poole and this email and any documentation must not
be copied or used other than as strictly necessary for the purpose
of this email, without prior written consent which may be subject
to conditions. Any view or opinions presented are solely those of
the author and do not necessarily represent those of the Borough
of Poole. The Borough of Poole reserves the right to inspect
incoming and outgoing emails. If you have received this email in
error please contact the sender by return and confirm that its
contents have been destroyed. Telephone enquiries should be
directed to the Borough switchboard on 01202 633633.'
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Qgis-user mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Qgis-user@lists.osgeo.org">Qgis-user@lists.osgeo.org</a>
<a class="moz-txt-link-freetext" href="http://lists.osgeo.org/mailman/listinfo/qgis-user">http://lists.osgeo.org/mailman/listinfo/qgis-user</a></pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
===========================================
Zoltan Szecsei PrGISc [PGP0031]
Geograph (Pty) Ltd.
GIS and Photogrammetric Services
P.O. Box 7, Muizenberg 7950, South Africa.
Mobile: +27-83-6004028
Fax: +27-86-6115323 <a class="moz-txt-link-abbreviated" href="http://www.geograph.co.za">www.geograph.co.za</a>
===========================================</pre>
</body>
</html>