LinuxQuestions.org - Shell Shock on Bash

- Linux - Newbie (https://www.linuxquestions.org/questions/linux-newbie-8/)

- - Shell Shock on Bash (https://www.linuxquestions.org/questions/linux-newbie-8/shell-shock-on-bash-4175520861/)

Shell Shock on Bash

Hello All,

Due to the latest news regarding on Bash vulnerability. I will like to seek advise on the latest patch update for my Bash.

After running the simple vulnerability test, i realise that my system is vulnerable

I have currently upgraded from "bash-3.0-19.2.src.rpm" to "bash-3.0-19.7.src.rpm" but did not solve the problem.

My OS version is "Red Hat Enterprise Linux AS release 4 (Nahant Update 1)"

Please, can someone assist

open a new terminal and type:

Code:

env x='() { :;}; echo vulnerable' bash -c "echo not vulnerable"

In that form, you would see:

Quote:

vulnerable
not vulnerable

If you ARE vulnerable.

But that only tests one part of it. The more complete test ATM is:

Code:

env 'x=() { :;}; echo vulnerable' 'BASH_FUNC_x()=() { :;}; echo vulnerable' bash -c "echo test"

I think. It's hard to keep track. :/

Hi,

Quote:

Originally Posted by seyiisq (Post 5248114)

Since you are using RedHatEl then you should present these queries to RedHad.. In the Slackware forum a on going thread may help you to see how they are tracking & patching; https://www.linuxquestions.org/quest...-a-4175489800/ on and around posts #216 & #225 should help you and not having to read the whole thread.

You may request that your thread be moved to RedHat forum by pressing the report button on your initial post then request politely a move.

Hope this helps.
Have fun & enjoy!
:hattip:

Quote:

Originally Posted by seyiisq (Post 5248114)

Due to the latest news regarding on Bash vulnerability. I will like to seek advise on the latest patch update for my Bash.

Do you realize you're way late??!!@#3@ This has been going on for over a week now.

Quote:

Originally Posted by seyiisq (Post 5248114)

After running the simple vulnerability test, i realise that my system is vulnerable I have currently upgraded from "bash-3.0-19.2.src.rpm" to "bash-3.0-19.7.src.rpm" but did not solve the problem. My OS version is "Red Hat Enterprise Linux AS release 4 (Nahant Update 1)"

See https://access.redhat.com/articles/1200223 because:
- there's 6 CVE numbers attached right now,
- 6 tests described on the page,
- all affected RHEL products and their fixed Bash versions.

*BTW you don't install .src.rpm's to fix vulnerabilities: those are for compiling packages. (Which you shouldn't do.) Please either get the knowledge stat or let somebody responsible and knowledgeable maintain those systems and in a timely fashion!