Shellshock: another patch for old Linux distributions…

Bash-Release: 4.3
Patch-ID: bash43-030
Bug-Reported-by: Michal Zalewski <lcamtuf@coredump.cx>
Bug-Reference-ID:
Bug-Reference-URL:
Bug-Description:
A combination of nested command substitutions and function importing from
the environment can cause bash to execute code appearing in the environment
variable value following the function definition.

Another patched version of Bash against Shellshock for outdated Linux distributions.

This patch works on Mandriva 2008 to 2010.2, 64-bit OpenSUSE 12.1 Asparagus, and Red Hat Enterprise Linux Server release 5.2 (Tikanga).

I’ve also made a patched version available for the 64-bit OVH Release 2 Linux distribution.

To install the patched version, log in to your server as root and run:

wget https://www.christophe-casalegno.com/patchs/bash
<span style="color: #ff0000;">Si version ovh Release 2:</span>
<span style="color: #ff0000;"> wget https://www.christophe-casalegno.com/patchs/bash_ovh_rl2</span>
<span style="color: #ff0000;"> mv bash_ovh_rl2 bash</span>
chmod +x bash

After this, you can test whether Bash is working properly:

./bash

If everything is OK:

mv /bin/bash /bin/bash_old
mv bash /bin

Direct link to the patched version: https://www.christophe-casalegno.com/patchs/bash

If your version is unsupported, you can download the patched source here: https://www.christophe-casalegno.com/patchs/bash-4.3.tar.gz

Install from source:

wget --no-check-certificate https://www.christophe-casalegno.com/patchs/bash-4.3.tar.gz
tar xvf bash-4.3.tar.gz
cd bash-4.3
./configure
make

Then you must test whether the new Bash is working properly:

./bash

If everything is OK, run:

mv /bin/bash /bin/bash_old
mv bash /bin

--
Christophe Casalegno
https://all.bo

Leave a comment