Great, thanks for the confirmation.

From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Regis M
Sent: 01 October 2014 12:52
To: FreeSWITCH Users Help
Subject: Re: [Freeswitch-users] Bash ShellShock vulnerability

Freeswitch will not be affected when running on system with patched bash.

If freeswitch runs on system affected, with somewhere in a script a call to command "System" that use user's variable (passed by web, or cli, or anywhere else), you're hit. If you're system use a patched bash, you're safe.

Regards

2014-10-01 12:03 GMT+02:00 Chris Young <Chris.Young@enghouse.com>:

Hi all,

This should be a nice easy one - could somebody please confirm for me that FreeSWITCH 1.4.x is not affected by the Bash ShellShock vulnerability. I'm sure this is the case but we have some partners who are concerned about it and would like some reassurance.

Many thanks,

Chris

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org