Bash Shellshock patching

[Durzel]

up2date -u

yum update

Either of those work?

[sirbadger]

You could try compiling a patched version

http://stevejenkins.com/blog/2014/09/how-to-manual...

P.s. not an expert but worked for me ona couple of Debian and centos boxes

[Pentoman]

Thankyou both.

Forgot to mention - server not Internet connected!!!

[AJB88]

Pentoman said:

Thankyou both.

Forgot to mention - server not Internet connected!!!

Your at very little threat then

[supersport]

AJB88 said:

Pentoman said:

Thankyou both.

Forgot to mention - server not Internet connected!!!

Your at very little threat then

That's a slight understatement! If it's not connected then the only risk is from people who already have access to it, and then any vulnerabilities are somewhat irrelevant.

[Pentoman]

Thanks for these.
Let's just say I have good reasons to patch it and I've already assessed what is the risk.

[sirbadger]

Pentoman said:

Thankyou both.

Forgot to mention - server not Internet connected!!!

you can download the source and patches on another machine and transfer them via winscp or similar. You would then have to manually apply the patches unless you modify the shell script in the link above.

Edited by sirbadger on Wednesday 1st October 15:16