The day I open the computer, I found that the group said bash the loophole, immediately searched the next, found incredibly more serious than the heart of the loopholes, well, it seems that there are things to do today.
System: centos5.x
1. Detect if your server needs to be repaired
Env x= ' () {:;}; echo vulnerable ' bash-c ' echo this is a test
If the output is vulnerable, then bash will be upgraded.
2. Upgrade Bash
YUM-Y Update Bash
If you are a CENTOS6 server, perform/sbin/ldconfig after Yum, and then reboot your server.
3. Verify
Env x= ' () {:;}; echo vulnerable ' bash-c ' echo this is a test
If you report the following lines, you have no holes in bash:
BASH:WARNING:X: Ignoring function definition attempt
Bash:error importing function definition for ' x '
This is a test
All right, if you want to upgrade, it's up to you to see if the above person has approved it.