librelist archives

« back to archive

Paramiko and Shellshock

Paramiko and Shellshock

From:
Olivier Thonnard
Date:
2014-10-08 @ 09:25
Hello everyone,

I don't think Paramiko might be susceptible in any way to the Shellshock
vulnerability, as I didn't see anywhere in the code a possible use of Bash
for setting environment variables.

However, I just wanted to double-check with people who are more familiar
with the Paramiko codebase, just to be on the safe side. Can someone from
the core development team can confirm this ?

Thanks in advance,

Olivier