Update your bash version for Redhat Enterprise 6 in prevention to “Bash Bug” or “Shell Shock”

Posted: September 26, 2014 in Linux Related, RedHat/CentOS
Tags: , , , , , , ,

Per initial statement from REDHAT until waiting for another patch they strongly suggest to update your bash version to the latest to avoid the bug.

How to check if your system is affected by Shellshock? per ibtimes

This is a relatively simple one to check. Simple call up a Terminal on your desktop, and type in this line of code at the $ prompt:

env x='() { :;}; echo vulnerable’ bash -c ‘echo hello’

If your system is vulnerable, then you will see this:

vulnerable

hello

If it is not vulnerable you will see this:

bash: warning: x: ignoring function definition attempt

bash: error importing function definition for 'x'

hello

Quick easy way to patch if you Redhat 6 if you do not have the official Subscription:

[root@nightops tmp]# wget http://public-yum.oracle.com/repo/OracleLinux/OL6/latest/x86_64/getPackage/bash-4.1.2-15.el6_5.1.x86_64.rpm
[root@nightops tmp]# rpm -Uvh bash-4.1.2-15.el6_5.1.x86_64.rpm

For more information about ShellShock or Bash bug please visit the link below:
http://www.ibtimes.co.uk/what-shellshock-os-x-linux-bash-bug-that-could-be-bigger-heartbleed-1467201

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s