Linux official built-in bash recently found a very serious security vulnerability, hackers can use the bash to fully control the target system and launch attacks, in order to avoid your Linux server affected, we recommend that you complete the bug fix as soon as possible.
The following is a small series for everyone to attach the most common Linux kernel CentOS and Ubuntu Server Repair Bash Vulnerability Ultimate Repair method. You can learn l002-old boys ' effectiveness education-basic computer and Linux Getting Started tutorial Learn about Linux.
Software and systems that have been successfully exploited have been identified: all Linux operating systems installed with GNU Bash version less than or equal to 4.3.
"Bash Vulnerability description"
The vulnerability stems from the special environment variables created before the bash shell that you invoke, which can contain code and be executed by bash.
"Vulnerability Detection Method"
Using the vulnerability Detection command in a server command: Env-i x= ' () {(a) = ' bash-c ' echo date '; Cat Echo
Before the repair, the current system time is displayed, the server this vulnerability has not been repaired, please fix it, the following is attached to the Linux system repair program, mainly includes: CentOS and Ubuntu System final repair solution.
First, the CentOS Final Repair Bash Vulnerability scenario
In the Server command box, type the following command to upgrade to fix the vulnerability:
Yum Clean All
Yum Makecache
YUM-Y Update Bash
Second, Ubuntu final Fix bash Vulnerability scheme, please run the following command
Apt-cache gencaches
Apt-get-y Install--only-upgrade Bash
After the above method is repaired, we run the detection command again: Env-i x= ' () {(a) = ' bash-c ' echo date '; Cat Echo
If the output is repaired with a patch scenario: date, which means that the output contains a date string, the bug fix succeeded.
This fix will not have any effect, if your script uses the above method to define environment variables, your script execution will error after repair, in order to prevent unexpected situation, we recommend that you first backup the Linux server system disk before executing the command. more system operation and Maintenance tutorial knowledge can be sent to e-mentor network learning.
CentOS and ubuntu Server Bash bug fix method