Christophe Casalegno

shellshock another patch for old linux distributions…


Bash-Release: 4.3
Patch-ID: bash43-030

Bug-Reported-by: Michal Zalewski <lcamtuf@coredump.cx>
Bug-Reference-ID:
Bug-Reference-URL:

Bug-Description:

A combination of nested command substitutions and function importing from
the environment can cause bash to execute code appearing in the environment
variable value following the function definition.

Another new version of patched bash version against shellshock for out of date linux distribution.

This patch works with success on Mandriva 2008 to 2010.2, OpenSUSE 12.1 Asparagus 64 bits & Red Hat Enterprise Linux Server release 5.2 (Tikanga).

I’ve also put a corrected version for OVH Release 2 64 bits linux distribution

To install the corrected version, connect you with root on your server and do :


wget https://www.christophe-casalegno.com/patchs/bash
Si version ovh Release 2:
wget https://www.christophe-casalegno.com/patchs/bash_ovh_rl2
mv bash_ovh_rl2 bash
chmod +x bash

After this, you can test if bash is working fine : 

./bash

if all is ok :


mv /bin/bash /bin/bash_old
mv bash /bin

direct link to the corrected version  : https://www.christophe-casalegno.com/patchs/bash

Si vous have an unsupported version, you can download de source patched version here :  https://www.christophe-casalegno.com/patchs/bash-4.3.tar.gz

Install the source version :


wget --no-check-certificate https://www.christophe-casalegno.com/patchs/bash-4.3.tar.gz
tar xvf bash-4.3.tar.gz
cd bash-4.3
./configure
make

After, you must test if the new bash is working fine :

./bash

If all is ok do  :


mv /bin/bash /bin/bash_old
mv bash /bin


Christophe Casalegno
https://twitter.com/Brain0verride

Leave a Comment