ShellShock - bash already updated?

I'm trying to fix this new ShellShock bug on my PC (running Ubuntu 14.04). From what I've gathered, the simplest way to do this is to just update bash via the terminal (I've tested my system for the vulnerability, its there I'm afraid).

What I've tried:

sudo apt-get update
sudo apt-get install bash
which led to the following output:
...
Building dependency tree
Reading state information... Done
bash is already the newest version.
0 upgraded, 0 newly installed, 0 to remove and 1 not upgraded.

I've also attempted the following:

sudo apt-get update && sudo apt-get install --only-upgrade bash

Showed the same output.

Any idea how can I fix this?

2

1 Answer

A simple restart did it.

Even if you close the terminal, there might be some old instances of bash still active in background, So just restart bash (I would rather just restart overall) and everything should be OK.

To sum it up, here is how to make sure you're safe:

1. Run the following in terminal:

   env x='() { :;}; echo vulnerable' bash -c "echo this is a test"

this is simply to make sure you're actually vulnerable (the output should be "vulnerable this is a test").

2. Update bash and your packages:

   sudo apt-get update && sudo apt-get install bash

3. Restart your system (or restart bash completely - don't just close the terminal!)

4. Open the terminal after the reboot - run the above test again. The result you should see now is "this is a test".

Good luck

4