[olug] Bash Bug Info

Jon Larsen jon at jonlarsen.us
Fri Sep 26 10:08:50 CDT 2014


Make sure you update bash (again) to the newer revision for CVE-2014-7169,
these patches were released yesterday afternoon/evening.

On Fri, Sep 26, 2014 at 8:32 AM, <jregier at cox.net> wrote:

> >
> > See, I'm starting to come up with a way of upgrading the hundreds of
> > servers I deal with that run a non-standard distro.  There will be no
> > upstream fix, so I gotta roll my own (and distribute it on my own).
> >
> > So, like any sane person, I go looking for the sources and such...
> > obviously from the original source (GNU).
> >
> > I see a nice tarball from Feb.  And then 25 paches in the patches
> > directory.  And looking at the patch sources, I probably need to apply
> > all of them in order.  Talk about irritating.
> >
> > *sigh*.
> >
> > onward! (with popcorn, if anyone gets the reference).
> >
> >
> > _______________________________________________
> > OLUG mailing list
> > OLUG at olug.org
> > https://lists.olug.org/mailman/listinfo/olug
>
>
> You can do something like this:
>
> for i in $(seq -f "%03g" 1 52); do
>   wget -nv http://ftp.gnu.org/gnu/bash/bash-3.1-patches/bash31-$i
>   patch -p0 < bash31-$i
> done
>
> There is a fuller version here:
> https://gist.github.com/href/54859127c183f67f947f
> Adapt to your particular distro needs.
>
> It does not look like the latest fix is fully backported yet, so check
> that first.
>
>
>
> Jesse Regier
>
>
>
> _______________________________________________
> OLUG mailing list
> OLUG at olug.org
> https://lists.olug.org/mailman/listinfo/olug
>


More information about the OLUG mailing list