CentOS6 offline bash vulnerability repair

CentOS6 offline bash vulnerability repair

Today, we are all fixing the bash vulnerability. I have also made some offline upgrades, as shown below:

1. Test whether upgrade is required

# Env x = '() {:;}; echo vulnerable' bash-c "echo this is a test" # The following is displayed. You need to upgrade

Vulnerable

This is a test

2. Offline upgrade

### Many servers cannot go out of the Internet, but can only download and upgrade

# Wgethttp: // response

# Rpm-Uvhbash-4.1.2-15.el6_5.1.x86_64.rpm

#/Sbin/ldconfig # Not executed

# Rpm-qa bash # view the upgraded version

# Env x = '() {:;}; echo vulnerable' bash-c "echo this is a test" # The following figure shows that the upgrade is successful.

Bash: warning: x: ignoring function definition attempt

Bash: error importing function definition for 'X'

This is a test

3. legends ......

### The latest message indicates that you can bypass the upgrade and wait for the message to continue watching ......