Security advisory: Phusion Passenger and the CVE-2014-6271 Bash vulnerability

On 24 September 2014, an important security vulnerability for Bash was published. This vulnerability, dubbed “Shellshock” and with identifiers CVE-2014-6271 and CVE-2014-7169, allows remote code execution. This vulnerability is not caused by Phusion Passenger, but does affect Phusion Passenger. We strongly advise users to upgrade their systems as soon as possible. Please note that while CVE-2014-6

[yuyamagu]

Passengerも影響受けるのか

[sonots]

Passenger が影響受けるの？

[nekoruri]

Passengerが #shellshock の影響受けるの、ちゃんと広まってるのか心配。