Freeswitch will not be affected when running on system with patched bash. If freeswitch runs on system affected, with somewhere in a script a call to command "System" that use user's variable (passed by web, or cli, or anywhere else), you're hit. If you're system use a patched bash, you're safe. Regards 2014-10-01 12:03 GMT+02:00 Chris Young <Chris.Young@enghouse.com>:
Hi all,
This should be a nice easy one - could somebody please confirm for me that FreeSWITCH 1.4.x is not affected by the Bash ShellShock vulnerability. I'm sure this is the case but we have some partners who are concerned about it and would like some reassurance.
Many thanks,
Chris
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org