Hi,

- We didn't purchase support from RH, is there anyway to download the patch for "bash" vulnerability for RHEL?
- Where to download the patch for "bash" vulnerability for CentOS?

Thanks in advance.

1) If you aren't paying RH for support you should uninstall RHEL, I believe that's part of the contract agreement.
2) If your CentOS servers are configured correctly then "yum update bash" should work just fine.

1 members found this post helpful.

Yes...you contact Red Hat, and PAY FOR RHEL.
Through the CentOS repositories....which may (or may NOT) work correctly with your unlicensed RHEL server, and may (or may NOT) cause problems with your unlicensed RHEL server. There's no way of knowing, since you don't say what version of RHEL you're using, and how far out of date/patch-level you're already at. Fixing bash may cause other problems...and it may not even be POSSIBLE, if your system is too far off kilter already.

If you want your server to be stable, then call Red Hat, pay for support, and use the certified repositories. If you don't want to pay, stop where you are, and do a fresh install of CentOS instead, and move forward.

Hi,

Correct me that once the support contract with RH, it is not allow to continue use RH?

← #4 .

There is no reason to use an RHEL OS with no license.
! You cannot get updates or packages.

Solution : Migrate the OS to CentOS
http://wiki.centos.org/HowTos/MigrationGuide

-

What??? If you get under support with Red Hat, then you get support from Red Hat. You can USE RHEL as long as you want for free, but you WILL NOT get support/patches/fixes, simple as that.

So, again...either pay for RHEL, and get the certified patches/updates, or migrate/load CentOS instead. Again, you don't say what version of RHEL you're using...if it's anything less than 5.10, you may not be able to purchase ANY support AT ALL, since it's too old.

If you want to be fancy, you can download the patched Source RPMS directly from RH and compile them...