[Commotion-dev] Commotion and Shell Shock

Dan Staples danstaples at opentechinstitute.org
Thu Sep 25 10:53:35 EDT 2014


The news about the Shell Shock/Bash bug[1] has gotten pretty big now.
There's also a lot of rhetoric about this being a bigger deal than the
Heartbleed vulnerability. I am wondering if it's worth putting up a
quick blog post on the Commotion website that the router firmware is
*not* vulnerable (since OpenWRT comes with the ash shell by default
rather than bash).

Thoughts?

Dan

[1] https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6271

-- 
Dan Staples

Open Technology Institute
https://commotionwireless.net
OpenPGP key: http://disman.tl/pgp.asc
Fingerprint: 2480 095D 4B16 436F 35AB 7305 F670 74ED BD86 43A9


More information about the Commotion-dev mailing list