Shellshock bug?

• 

  davidderrick · Member · Sep 26, 2014 at 10:16 am

  • Copy link
  • Add topic to favorites

  Could we have a statement about the vulnerability of our content – or lack thereof – from WordPress?

  I realise our OSs and routers might have their own vulnerabilities, but it would be reassuring to know that we are safe at the other end.

  Thanks!

  The blog I need help with is: (visible only to logged in users)

• 

  timethief · Member · Sep 26, 2014 at 4:06 pm

  • Copy link

  Have you read this?

  The vulnerability does not impact Microsoft Windows users, but there are patches available for Linux and Unix systems. In addition, Mac users are likely vulnerable, although there is no official patch for this flaw from Apple yet.
  http://krebsonsecurity.com/2014/09/shellshock-bug-spells-trouble-for-web-security/

• 

  growlerbearnz · Member · Sep 26, 2014 at 11:34 pm

  • Copy link

  Agreed- a public statement from WordPress regarding their specific vulnerabilities to CVE-2014-6271 (Shellshock), and actions being taken to patch them, would be much appreciated.

• 

  davidderrick · Member · Sep 27, 2014 at 8:25 am

  • Copy link

  Thanks, Timethief. Yes, aware of all that. It’s the vulnerability of the WP servers that we should be concerned about. One would normally assume that WP as a responsible major provider had applied all patches, but why hasn’t it made a statement to the effect as many others have (though this is typical WP)? Also, the recent editor shambles makes one wonder whether they are on top of it. I’m sure they are, but a word on this would definitely be appreciated.