Ubuntu 14.04 Vulnerable to Shellshock? I just installed 14.04 today, found seems the system still have Shellshock issue:  dli@srv:~$ lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description:    Ubuntu 14.04.1 LTS Release:    14.04 Codename:   trusty dli@srv:~$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test" vulnerable this is a test   I think might be better to get it fixed from the installation image?
What is the CVE-2014-6271 bash vulnerability (Shellshock) and how do I fix it? Recently, there have been news going around regarding "CVE-2014-6271" (See ), which is a vulnerability in Bash. How do I know if I am affected by this, how can I fix it, and why should I care?  This is designed as a canonical answer for this vulnerability, due to its scope and severity.
Write18: capturing shell (script) output as command/variable? Let's say I compile the following file with pdflatex -shell-escape test.tex:   \documentclass{minimal}  \begin{document}  File listing is:  \immediate\write18{ls /usr}  \end{document}   This will send the output of the command ls /usr to report/log of pdflatex (primarily to stdout).   There are then two cases I'd like to utilize:    The output of ls /usr being included directly in the document (LaTeX stream). The output of ls /usr becoming the contents of a \newcommand (by this I mean, that I'd like the script to be executed when the \newcommand is executed first - and upon subsequent calls to the new command, the shell code should not be executed anew).    I have read through , but I'm not sure if this "pipe input" can be applied to \newcommand.   I have also read through  - and it seems that Tex' file I/O should be used; but I'm quite disliking the fact that I'd still have to redirect the script output (actually, in this case, the ls /usr output) to a file, and then read it in, to have it as contents of a command.   So, is there an easier way to achieve what I'd want (hopefully, illustrated through an example based on the above code)?     EDIT: Ehm, I should have asked one more question earlier :) I'll try with an edit here, although it will probably get missed .. :)   I originally asked for a \newcommand that will execute shell code only upon its definition (i.e., in a sense it is "cached"); and the answer from @egreg does exactly that. But then - would it be possible to have a different \newcommand definition, such that each time this newcommand is called, the shell command is executed anew? I.e. executing something like \@@input|"cat tempfile" (which cannot be executed as such), where tempfile changes between calls? What are the differences between 32-bit and 64-bit, and which should I choose? Find the last two digits of $9^{{9}^{9}}$ I have to find the last two decimal digits of the number $9^{{9}^{9}}$.  That's what I did:  $$m=100 , \phi(m)=40, a=9$$ $$(100,9)=1, \text{ so from Euler's theorem,we have :} 9^{40} \equiv 1 \pmod{100}$$  $$9^{{9}^{9}} \equiv 9^{9^{2+2+2+2+1}} \equiv 9^{9^2 \cdot 9^2 \cdot 9^2 \cdot 9^2 \cdot 9} \equiv 9^{81 \cdot 81 \cdot 81 \cdot 81 \cdot 9} \equiv 9^{(40+40+1) \cdot (40+40+1) \cdot (40+40+1) \cdot (40+40+1) \cdot 9} \equiv (9^{(40+40+1)})^{(40+40+1) \cdot (40+40+1) \cdot (40+40+1) \cdot 9} \equiv 9^9 \equiv 9^4 \cdot 9^4 \cdot 9 \equiv 6561 \cdot 6561 \cdot 9 \equiv 3721 \cdot 9 \\ \equiv 21 \cdot 9 \equiv 89 \pmod{100}$$  So,the last two digits are $8 \text{ and } 9$. $$$$But,is there also an other way two calculate the last two digits of $9^{{9}^{9}}$ or is the above the only one? According to , POST is used to create a resource:  The POST method is used to request that the origin server accept the entity enclosed in the request as a new subordinate of the resource identified by the Request-URI in the Request-Line.  According to , PUT is used to create or replace a resource:  The PUT method requests that the enclosed entity be stored under the supplied Request-URI. If the Request-URI refers to an already existing resource, the enclosed entity SHOULD be considered as a modified version of the one residing on the origin server. If the Request-URI does not point to an existing resource, and that URI is capable of being defined as a new resource by the requesting user agent, the origin server can create the resource with that URI.  So which HTTP method should be used to create a resource? Or should both be supported? How to make foam with bubbles (beer, bath) My goal is create realistic foam. I mean really realistic foam with bubbles, no only SSS shader and done :-).   Use particle system's is not enough, because bubbles overlaps and black artifact's appear.  Any ideas? Some reference images and something about bubbles:    EDIT:  I want this for 360° turntable animation. Bubbles and foam does not to be animated, but should be good keep reasonable render time.  Of course, if someone know how to make it animated I glad to learn it and I'm sure I'm not only one. But my priority is realistic look, not animation.  Only for clarification: I don't need to know how to make bubbles in beer (there is very good tutorial by Andy Price), please focus only on foam. Beer is not important. Is a particular sequence required for detailed replicator requests?    To elaborate, is there a reason Captain Picard orders his tea, "Tea. Earl Grey. Hot." aka "Noun. Descriptor. Descriptor." and not "Descriptor. Descriptor. Noun." or "Descriptor. Noun. Descriptor." (in the event he forgot a descriptor)?  Would ordering it as "Hot. Earl Grey. Tea." or even the non-statement "Hot Earl Grey tea." produce a warm (hot), smoky (gray-ish) gas with the odor of tea?  I assume his ordering sequence is an acquired background affectation, but I'd like confirmation.  Note: I'm using "descriptor" instead of "adjective" to avoid minutia/debate about classification. How to get method parameter names? Subscribe to tags I am interested in? How do I subscribe to the tags that I am interested in?  I like to get notified via email or so, when someone asks new questions or if someone responds to my questions. What is the command that lets me see what and where devices are mounted?  I'm having trouble changing songs on my old iPod, and I have a feeling it's because of the mount point. I would like to find a way to construct uncountably many non-isomorphic linear (total) orderings of natural numbers (as stated in the title).  I've already constructed two non-isomorphic total orderings. They are $$ 1 &lt; 2 &lt; 3 &lt;\ldots\\ 1 &gt; 2 &gt; 3 &gt;\ldots $$ where "$&lt;$" and "$&gt;$" are  strict total ordering relations.  Thanks in advance for your help. How do I install different (upgrade or downgrade) PHP version in still supported Ubuntu release? I am trying to update to install PHP 5.5, 5.6 or 7.0 in Ubuntu 12.04/14.04/16.04 LTS, and I can only get PHP 5.3.10 for Ubuntu 12.04, PHP 5.5.9 for Ubuntu 14.04 or PHP 7.0.4 for Ubuntu 16.04 using official repositories (using apt-get).  I'm not really sure how to do a manual update – as I need:   to play around with the new(est) PHP features to install older PHP version due support in the software I have a homework question that asks     Find necessary and sufficient conditions on $1 \leq i &lt; j \leq n$ so that $(i \, j)$ and $(1 \, 2 \, \dotsc \, n)$ generate $S_n$.   Here is what I have done so far.  Call $c = (1 \, 2 \, \dotsc \, n)$.  I made the observation that $$ \overbrace{c c \dotsb c}^{n - j + 1} (i \, j) \overbrace{c^{-1} c^{-1} \dotsb c^{-1}}^{n - j + 1} = (1 + i - j + n \, 1). $$ Thus, $\langle (i \, j), c \rangle = \langle (1 \, i - j + n + 1), c \rangle$, so it suffices to look at $\langle (1 \, k), c \rangle$ for positive integers $2 \leq k \leq n$.  I've checked that, for the value $k=2$, $\langle (1 \, 2), c \rangle = S_n$.  This immediately implies $\langle (1 \, n), c \rangle = S_n$.  I suspect that no other values of $k$ will work, but am not sure how to prove it. In what situations is octal base used? Prevent ligatures in Safari (Mavericks/iOS7) via CSS Evaluate the integral $$\int_0^{\pi/2} \frac{1}{1+\tan^\alpha{x}}\,\mathrm{d}x$$ How to install Flash player on Ubuntu? Even though I have the latest Adobe Flash player 11.2 for Linux in Firefox -   - a particular online flash game still requests that I update to the latest flash player.  I've tried this online game on my laptop (Windows 8 with Flash Player 11.8) and it has no problems.  Is there a way to trick Ubuntu or this game into thinking Flash Player 11.8 is "installed"? How do I run specific sudo commands without a password? Creating shapefile from current dataframe extents in layout view of ArcMap? The definition of span How to convert sshfs command to fstab entry? From another SO , I understand I should create an entry in fstab to permanently mount an access to a virtual machine.  I am not Linux expert. The magic command which allows me to perform this from a terminal is:  sudo sshfs -o idmap=user -o allow_other -o nonempty jverstrynge@devjverstrynge:/home/httpd /home/jverstrynge/httpd   When I check the above SO question, I see an entry looking like this:  /media/mybook/laptop_backup /export/laptop_backup none bind 0 0   Can someone explain how to transform the CLI command into an entry in fstab?