From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <zsh-users-return-19146-mason-zsh=primenet.com.au@zsh.org>
Received: (qmail 27587 invoked by alias); 25 Sep 2014 16:35:13 -0000
Mailing-List: contact zsh-users-help@zsh.org; run by ezmlm
Precedence: bulk
X-No-Archive: yes
List-Id: Zsh Users List <zsh-users.zsh.org>
List-Post: <mailto:zsh-users@zsh.org>
List-Help: <mailto:zsh-users-help@zsh.org>
X-Seq: 19146
Received: (qmail 10430 invoked from network); 25 Sep 2014 16:35:09 -0000
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on f.primenet.com.au
X-Spam-Level: 
X-Spam-Status: No, score=-2.7 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	DKIM_VALID,DKIM_VALID_AU,RCVD_IN_DNSWL_LOW autolearn=ham version=3.3.2
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=ucsc.edu; s=ucsc-google;
        h=from:content-type:content-transfer-encoding:subject:message-id:date
         :to:mime-version;
        bh=0QPxOgCw+4hA4zCAqDWVDy6wHq0WUwGtrl5aEwRGg5c=;
        b=b7idtMk/ob53Pq3EV+RQH401HA5vBKRJLZsfSAHmnR8MSvtpmeKeD0/72UJ+2QJWBh
         KVj8LZcD6GAph59ZHjAoOeWmxaIyPsLCpGC/2Wh7IvwfylC/kqJ0wAcQqVbbeEaJs+fO
         eMitpGRB5/T+QRLAed3imMXqpxL/hsirBOG5U=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20130820;
        h=x-gm-message-state:from:content-type:content-transfer-encoding
         :subject:message-id:date:to:mime-version;
        bh=0QPxOgCw+4hA4zCAqDWVDy6wHq0WUwGtrl5aEwRGg5c=;
        b=KJZnYNOG7sutYdYfT7JIX4MsVfq/B2xAN4BcDHsjHnXs+yoRI3K2xoa9VpoA7Xss3u
         QJm2vlFcxPkRASx0xIZDPfcvILpNJY2iENVxoxChHujstF8Z/HDsh+0lIxhsVyvXsIE6
         T3wC9HNwwpkO806ibrOXiTi9HFJXE2fssqNKi0b6r6Slm03mH02RQmf3c3ddIH4s/2w1
         bSR/4uK9n69BSsFm1Q5yewkeSJdtJytXHTxzcVu6yhxWQH4/fiLE2ZB2Ido8kHxBKZja
         QO3T9ltp9agBm+DqtB2RkZrUZ6Acaujl1tkWZCSkuyCJKkMckfMqG4GZfzIsrCO7timV
         eXiw==
X-Gm-Message-State: ALoCoQkGVV/dzXAKuoztTgLD0pWaqpecU+M7zj+FtYrUdq8CRI5sGq4O9Tn7+wTzXmHylaBCojnk
X-Received: by 10.224.20.66 with SMTP id e2mr20776587qab.25.1411662904364;
        Thu, 25 Sep 2014 09:35:04 -0700 (PDT)
From: "William G. Scott" <wgscott@ucsc.edu>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable
Subject: Does the bash bug have a zsh counterpart?
Message-Id: <1B204EC0-006C-47D9-80F3-007562954A8D@ucsc.edu>
Date: Thu, 25 Sep 2014 09:35:01 -0700
To: zsh-users@zsh.org
Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\))
X-Mailer: Apple Mail (2.1878.6)

Hi folks:

Does any version of zsh have the same issue as bash, reported eg at

=
<http://arstechnica.com/security/2014/09/bug-in-bash-shell-creates-big-sec=
urity-hole-on-anything-with-nix-in-it/>


The test listed toward the end of the article doesn=92t indicate that it =
does (substituting zsh for bash), but I just wanted to ask.

I was thinking of temporarily replacing sh and bash on OS X with zsh =
until a security fix is offered.

Many thanks.


Bill