Bash-Release: 4.3
Patch-ID: bash43-030

Bug-Reported-by: Michal Zalewski <lcamtuf@coredump.cx>
Bug-Reference-ID:
Bug-Reference-URL:

Bug-Description:

A combination of nested command substitutions and function importing from
the environment can cause bash to execute code appearing in the environment
variable value following the function definition.


Another new version of patched bash version against shellshock for out of date linux distribution.

This patch works with success on Mandriva 2008 to 2010.2, OpenSUSE 12.1 Asparagus 64 bits & Red Hat Enterprise Linux Server release 5.2 (Tikanga).

I’ve also put a corrected version for OVH Release 2 64 bits linux distribution

To install the corrected version, connect you with root on your server and do :


wget https://www.christophe-casalegno.com/patchs/bash
Si version ovh Release 2:
wget https://www.christophe-casalegno.com/patchs/bash_ovh_rl2
mv bash_ovh_rl2 bash
chmod +x bash


After this, you can test if bash is working fine : 

./bash

if all is ok :


mv /bin/bash /bin/bash_old
mv bash /bin


direct link to the corrected version  : https://www.christophe-casalegno.com/patchs/bash

If you have an unsupported version, you can download de source patched version here :  https://www.christophe-casalegno.com/patchs/bash-4.3.tar.gz

Install the source version :


wget --no-check-certificate https://www.christophe-casalegno.com/patchs/bash-4.3.tar.gz
tar xvf bash-4.3.tar.gz
cd bash-4.3
./configure
make


After, you must test if the new bash is working fine :

./bash

If all is ok do  :


mv /bin/bash /bin/bash_old
mv bash /bin


—
Christophe Casalegno
https://twitter.com/Brain0verride