Mailing-List: contact dev-help@jackrabbit.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@jackrabbit.apache.org
Received-SPF: pass (athena.apache.org: domain of aklimets@adobe.com designates
 65.55.169.58 as permitted sender)
From: Alexander Klimetschek <aklimets@adobe.com>
To: "dev@jackrabbit.apache.org" <dev@jackrabbit.apache.org>
Subject: Re: Shellshock (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186,
 CVE-2014-7187, CVE-2014-6277)
Thread-Topic: Shellshock (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186,
 CVE-2014-7187, CVE-2014-6277)
Thread-Index: AQHP3CASxUpLDK1m70qHaaHC1aB1PZwYmbcA
Date: Mon, 29 Sep 2014 21:04:34 +0000
Message-ID: <ABF89509-7776-4630-B249-D96939B08A4F@adobe.com>
References: 
 <CAE5Wca2S2khSTfkxGqTweWuapwQdC9kBVAj7-gBOHEDhghtjpQ@mail.gmail.com>
In-Reply-To: 
 <CAE5Wca2S2khSTfkxGqTweWuapwQdC9kBVAj7-gBOHEDhghtjpQ@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
Content-Type: text/plain; charset="us-ascii"
Content-ID: <8820636D45BECF42A481606DB69E6ECA@namprd02.prod.outlook.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0

Jackrabbit itself doesn't use cgi or bash scripts.

Cheers,
Alex

On 29.09.2014, at 12:59, Ricardo Iramar dos Santos <riramar@gmail.com> wrot=
e:

> Hi All,
>=20
> Probably you've already heard about Shellshock
> (https://shellshocker.net) in the last few days and I didn't find any
> discussion about it here.
> Some of the projects that I work for are using jackrabbit 2.8 and I'd
> like to know from jackrabbit developers if we should concerning about
> shellshock.
> I don't think that it could have any impact but I decided just open
> the discussion here so maybe any expert could give some tip.
>=20
> Thanks
> Ricardo