[mythtv-users] Shellshock discussion

[Gary Buhrmaster]

On Fri, Sep 26, 2014 at 5:22 PM, Hika van den Hoven <hikavdh at gmail.com> wrote:
....
> But sh is not bash. So in other words, is sh vulnerable and can it
> reach through a not affected/vulnerable firewall.

sh is just the system shell.  On some platforms it is
a binary, sometimes a symlink.  Invoking sh gets you
bash sometimes, on some platforms.  On some
platforms it is dash.  Others ash.  There is not *one*
answer to the question in the general case.  However,
it is not even always relevant as to what /bin/sh
is.  Any script might have a #!/bin/bash at the top
to force use of bash.