Bash vulnerability latest patch installation tutorial [Download]

Bash vulnerability latest patch installation tutorial [Download]

Bash has recently exposed a serious vulnerability, which affects almost all Linux systems on the market. From the security perspective, the customer requires that the vulnerability be repaired for each affected host. As the company uses a Red Hat system, security is also affected.

(Digress: Red Hat Patches can be downloaded only after they are paid. As a poor person, I am helpless. I asked the company if I didn't buy the Red Hat service. The Red Hat service is generally calculated based on the number of CPUs, it seems that two of them are in one group. A group of services (the red hat person-in-charge service is called subscription) Costs 799 US dollars for 5 × 8 services and 1299 US dollars for 7 × 24 services .)

If a vulnerable server executes the following commands, the system prompts "vulnerable" and "this is a test,

If no vulnerability exists or the vulnerability is fixed, only "this is a test" is displayed ".

Because the company has not purchased the Red Hat service, it has obtained patches from third-party channels. (It took me a lot of points and hurt me)

There are two types of servers designed, one is Red Hat Enterprise Linux Server release 5 system is 32, and bash on the system is a bash-3.2-24.el5.

The patch file I got has a bash-3.2-33.el5_11.4.i386.rpm which is suitable for my use in this version.

Upload to the server and start installation.

After successful installation, run the test statement again to find that the vulnerability has been fixed.

The Red Hat Enterprise Linux Server release 6 is also 32-bit, And the bash version is the bash-4.1.2-8.el6.i686. This troublesome patch package is a bash-4.1.2-15.el6_5.2.src.rpm. Generally, this src package is compiled and requires a normal rpm generated after compilation for installation. Suddenly, when my mind crapped and I installed it directly, an error was reported,

Later I remembered that the uncompiled src package must be compiled before a normal rpm package can be generated.

Upload the src package to the server and compile it with the following command:

Rpmbuild -- after the rebuildbash-4.1.2-15.el6_5.2.src.rpm is compiled, several packages are generated under the/root/rpmbuild/RPMS/i686/directory.

Go to/root/rpmbuild/RPMS/i686/and find the bash-4.1.2-15.el6.2.i686.rpm package below for installation. The vulnerability has been fixed again,

The rest is that there are several red hat 6 servers left, And the compiled package can be installed on each server. The repair has been announced so far.

A friend who needs Red Hat 5 and 6 patch packages is provided here. 32 and 64-bit are all provided here, uploading the FTP server No. 1 of the Helper's house, if you need it, download it and install it by referring to the above steps.

------------------------------------------ Split line ------------------------------------------

FTP address: ftp://ftp1.bkjia.com

Username: ftp1.bkjia.com

Password: www.bkjia.com

[Download] the latest patch installation tutorial for Linux idc.com, July 15, and Bash vulnerabilities]

For the download method, see

------------------------------------------ Split line ------------------------------------------

Gitlab-shell is affected by Bash CVE-2014-6271 Vulnerability

Linux security vulnerability exposure Bash is more serious than heartbleed

The solution is to upgrade Bash. Please refer to this article.

Linux Bash Security Vulnerability repair