The question on this site: When was the shellshock (CVE-2014-6271/7169) bug introduced, and what is the patch that fully fixes it? explains how the vulnerability has been cured, but does not, as far as I can see, explain what is necessary for individuals to do on their own computers. Is there any need for further action if yum -y update bash gives No packages marked for update.?
Is there any need to take further action over ShellShock
shellshock;vulnerability
Following the comments,I have done this, and am satisfied that I am up-to-date. [Harry@localhost]~% rpm -qv bash bash-4.2.48-2.fc20.i686[Harry@localhost]~% env X='() { (a)=>\' sh -c echo date; cat echodatecat: echo: No such file or directory[Harry@localhost]~%