PDA

View Full Version : Bash update for ShellShock



JJJCR
29-Sep-2014, 07:56
hello guys, after installing the bash update patch for SLES-SP2.

And did this command below:
env X="() { :;} ; echo busted" /bin/sh -c "echo completed"
env X="() { :;} ; echo busted" `which bash` -c "echo completed"

It still shows "busted".

How to ensure that the system is free from Shellshock bug?

Thanks. :)

mikewillis
29-Sep-2014, 09:15
hello guys, after installing the bash update patch for SLES-SP2.

And did this command below:
env X="() { :;} ; echo busted" /bin/sh -c "echo completed"
env X="() { :;} ; echo busted" `which bash` -c "echo completed"

It still shows "busted".

How to ensure that the system is free from Shellshock bug?

Thanks. :)

There's actually been two bash updates recently, one on the 24th and another yesterday. Which update are you referring to and which version of SLES are you using? SLES-SP2 could mean SLES 10 SP2 or SLES 11 SP2, but both are out of general support.

If you are using SLES 11 SP2 and have Long Term Service Pack Support then an update, bash-3.2-147.14.22.1, was released yesterday
https://download.suse.com/Download?buildid=5DWQOT2vyus~