Updating from bash
To check if your Linode is vulnerable, run the following in Bash: in your output, you are running an upgraded version for CVE-2014-6271.While working on CVE-2014-6271, a new bug was discovered and given the CVE identifier CVE-2014-7169.
Microsoft worked with Canonical, the creators of Ubuntu Linux, to create WSL, a feature which debuted as part of Windows 10 Anniversary Update.WSL also allows you to run Linux command-line tools and apps alongside your Windows command-line, desktop and store apps, and to access your Windows files from within Linux.OS X ships with an outdated version of Bash as its default shell.However, it was important to get this exciting new feature into the hands of real users so that we could learn from them - YOU!- what WSL needed to run, what worked, and what didn't, etc. 🙂 On behalf of the WSL & Console engineering teams, a very sincere and grateful THANK YOU to all of you who've tried and used Bash/WSL over the last 12 months, and especially to all of you who filed issues on our Git Hub issues repo, contacted me on Twitter, submitted/voted for asks on our User Voice, asked questions on Stack Overflow, Ask Ubuntu, Reddit, our Command-Line Blog, the WSL Team Blog and elsewhere.The vulnerability allowed out-of-bounds memory access by using a fixed-sized redir_stack, which resulted in the ability to execute code that would not otherwise be run.
When Windows 10 Anniversary Update (AU) was shipped, the Windows Subsystem for Linux (WSL) was still far from complete, and was known to have many incompatibilities, especially with popular developer tools like node.js, Java, etc.
The idea was by putting Bash on Windows 10, Microsoft would expand its command-line tool family.
(It's possible to run open SUSE on Windows 10, too, but it's not currently supported by Microsoft.)WSL is still considered a beta feature at this point -- despite the fact that the WSL engineering team implemented "hundreds" of fixes Turner said.
This allows those who want/need to use Bash, common Linux tools (, etc.) and many Linux-first tools (Ruby, Python, etc.) to use their toolchain on Windows.
WSL provides an application called that, when started, opens a Windows console running the Bash shell.
Check out our blog where we go into detail about the underlying technology.