Red Hat安全团队在9月25日宣布在Linux中广泛使用的Bash shell中发现了一个隐晦而危险的安全漏洞。该漏洞被称为“Bash Bug”或“Shellshock”。当用户正常访问,该漏洞允许攻击者的代码像在Shell中一样执行,这就为各种各样的攻击打开了方便之门。而且,更糟糕的是,该漏洞已经在Linux中存在很长时间了,所以修补某个Linux机器很容易,但是要全部修补,几乎不可能 On September 25, the Red Hat security team announced a hidden and dangerous security hole found in the widely used Bash shell in Linux. This vulnerability is known as “Bash Bug ” or “Shellshock ”. When a user accesses properly, the vulnerability allows the attacker’s code to execute as if in a shell, opening the door to a wide variety of attacks. And, even worse, the flaw has been around in Linux for a long time, so patching a Linux machine is easy, but it’s almost impossible to patch it all