帖子状态  
本帖子共有 1800 位阅读者, 30 个回复.
  • 回复
31条记录

wjsandy

管理员
帖子
65 
金钱
365 
魅力
365 
威望
365 
注册
2014-07-01 
wjsandy 发表于 2014-09-26 08:02   
Linux Bash严重漏洞修复
特别提醒:Linux 官方已经给出最新解决方案,已经解决被绕过的bug,建议您尽快重新完成漏洞修补。
openSUSE 镜像暂时还没有给出,我们会在第一时间更新解决方案



【已确认被成功利用的软件及系统】  
所有安装GNU bash 版本小于或者等于4.3的Linux操作系统。  


【漏洞描述】  
该漏洞源于你调用的bash shell之前创建的特殊的环境变量,这些变量可以包含代码,同时会被bash执行。   


【漏洞检测方法】  
漏洞检测命令:env -i  X='() { (a)=>\' bash -c 'echo date'; cat echo


修复前
输出:   
当前系统时间  


使用修补方案修复后
输出
date   
(备注:输出结果中包含date字符串就修复成功了。)


特别提示:该修复不会有任何影响,如果您的脚本使用以上方式定义环境变量,修复后您的脚本执行会报错。


【建议修补方案 】  

请您根据Linux版本选择您需要修复的命令, 为了防止意外情况发生,建议您执行命令前先对Linux服务器系统盘打个快照,
如果万一出现升级影响您服务器使用情况,可以通过回滚系统盘快照解决。  

centos(最终解决方案)
yum clean all
yum makecache
yum -y update bash  

ubuntu(最终解决方案)
apt-get update
apt-get -y install --only-upgrade bash  

debian(最终解决方案)
7.5  64bit && 32bit  
apt-get update
apt-get -y install --only-upgrade bash  

6.0.x 64bit  
wget http://mirrors.aliyun.com/debian/pool/main/b/bash/bash_4.1-3+deb6u2_amd64.deb &&  dpkg -i bash_4.1-3+deb6u2_amd64.deb  

6.0.x 32bit  
wget http://mirrors.aliyun.com/debian/pool/main/b/bash/bash_4.1-3+deb6u2_i386.deb &&  dpkg -i bash_4.1-3+deb6u2_i386.deb


aliyun linux(最终解决方案)
5.x 64bit  
wget http://mirrors.aliyun.com/centos/5/updates/x86_64/RPMS/bash-3.2-33.el5_10.4.x86_64.rpm && rpm -Uvh bash-3.2-33.el5_10.4.x86_64.rpm  

5.x 32bit  
wget http://mirrors.aliyun.com/centos/5/updates/i386/RPMS/bash-3.2-33.el5_10.4.i386.rpm  && rpm -Uvh bash-3.2-33.el5_10.4.i386.rpm  



opensuse(官方还没有给出最终解决方案,该方案存在被绕过的风险,阿里云会第一时间更新,请继续关注)
13.1 64bit
wget http://mirrors.aliyun.com/fix_stuff/bash-4.2-68.4.1.x86_64.rpm && rpm -Uvh bash-4.2-68.4.1.x86_64.rpm

13.1 32bit
wget http://mirrors.aliyun.com/fix_stuff/bash-4.2-68.4.1.i586.rpm && rpm -Uvh bash-4.2-68.4.1.i586.rpm

该帖子于 2014-09-27 13:53 编辑过
技术开发,技术服务,技术咨询,技术转让,技术培训,基础软件服务,应用软件服务

EllInfery

初中生
帖子
45 
金钱
53 
魅力
53 
威望
53 
注册
2019-01-16 
EllInfery 发表于 2019-06-13 05:03   
RE:Linux Bash严重漏洞修复
Cialis Lo Mejor Generic Propecia 5mg Pharmacy Fluoxetine Overnight Shipping Medicine  cialis for sale Comprar Cialis Autentica Propecia While On Isotretinoin

EllInfery

初中生
帖子
45 
金钱
53 
魅力
53 
威望
53 
注册
2019-01-16 
EllInfery 发表于 2019-06-20 21:54   
RE:Linux Bash严重漏洞修复
Prix Viagra En Pharmacie Forum Cialis En France Medicina Online Propecia  generic cialis canada Kamagra Oral Jelly Online

EllInfery

初中生
帖子
45 
金钱
53 
魅力
53 
威望
53 
注册
2019-01-16 
EllInfery 发表于 2019-07-01 12:48   
RE:Linux Bash严重漏洞修复
Viagra Jelly Reviews For Men Infection Not Responding To Keflex Fluoxetine 40mg  generic cialis 100 Mg De Kamagra Discount Fedex Shipping Bentyl Website Internet Overseas Como Tomar El Kamagra

EllInfery

初中生
帖子
45 
金钱
53 
魅力
53 
威望
53 
注册
2019-01-16 
EllInfery 发表于 2019-07-13 12:29   
RE:Linux Bash严重漏洞修复
Viagra 100 Mg 2 Compresse Zithromax 200 Mg  viagra Canadian Health And Care Mall Order Propecia Online India Kamagra Haltbarkeit

heetldualp

幼儿园
帖子
金钱
魅力
威望
注册
2020-04-03 
heetldualp 发表于 2020-04-03 07:54   
RE:Linux Bash严重漏洞修复
brother viagra problem  is there a generic viagra on the market  <a href=" https://pharm-usa-official.com/# #">viagra side effects  </a>  price of viagra  viagra torture

when will viagra cheaper  homemade viagra juice that really work  viagra vs cialis   cost of viagra at walmart  usa viagra pills

https://pharm-usa-official.com - female viagra

http://www.stalowka.eu/artykul/9695/motyl-mosir-stalowa-wola-na-zawodach-w-kielcach-i-mielcu/#comments
http://study.xrkky.com/home.php?mod=space&uid=371841
https://www.floridagolfschoolvacations.com/national-golf_indaba20-20bunker1-jpg/?unapproved=238491&moderation-hash=04655bacd96865838e39ca96198caa8d#comment-238491
https://jangkau.com/turun-ke-jalan-yusril-turut-memeriahkan-may-day-bersama-kspi/#comment-417216
http://www.klosterheilkunde.com/index.php/component/k2/item/2-satellite-e205

romugdualp

幼儿园
帖子
金钱
魅力
威望
注册
2020-04-04 
romugdualp 发表于 2020-04-04 08:27   
RE:Linux Bash严重漏洞修复
vbb generic viagra  alexis fawx viagra bathroom  <a href=" https://pharm-usa-official.com/# #">viagra buy  </a>  first time fucking with viagra  old man takes viagra for the 1st time

cheapest 200mm viagra  buy viagra cialis  viagra online   female pink viagra 100mg pills  viagra commercial brunette actress nude

https://pharm-usa-official.com - levitra vs viagra

http://www.baijiamama.com/space-uid-58184.html
http://web.syekhnurjati.ac.id/as/2019/12/18/jadwal-uas-ganjil-t-a-2019-2020/?unapproved=2581&moderation-hash=5a1e42310f496f09154ea2cace254568#comment-2581
https://eakdigital.com/matthew-tipton/?unapproved=289269&moderation-hash=67f3ae71f6b8e3978cebff49216af980#comment-289269
https://nexhiphop.com/sports/coach-john-calipari-kentucky-wildcats-basketball-top-9-recruiting-classes/?unapproved=720755&moderation-hash=02ac4e7ebbc83ba5b2a2d8f225ff7326#comment-720755
http://pandorablake.com/blog/2011/8/percy-grainger#comment-5

qzygrdualp

幼儿园
帖子
金钱
魅力
威望
注册
2020-04-07 
qzygrdualp 发表于 2020-04-07 18:16   
RE:Linux Bash严重漏洞修复
first time fucking with viagra  pictures show viagra results  <a href="  https://viagrnetwork.com/#">viagra generic  </a>  viagra best way to deal with nasal congestion  what is female viagra

female viagra orgasm  when does the viagra patent expire  viagra prices   teva pharmaceuticals generic viagra  cialis vs viagra dosage comparison

https://viagrnetwork.com/# - online viagra


http://www.lifewordstoday.com/broken/?unapproved=1021398&moderation-hash=e3d81e3cae5fe47b52528cc47577fcf3#comment-1021398
https://infoplus.ci/politique/ouattara-je-nai-jamais-eu-de-probleme-avec-gbagbo?page=1#comment-587126
https://wazayef2.com/2019/10/23/%d9%88%d8%b8%d8%a7%d8%a6%d9%81-%d8%ae%d8%af%d9%85%d8%a9-%d8%b9%d9%85%d9%84%d8%a7%d8%a1-%d8%a8%d8%a7%d9%84%d8%a7%d9%85%d8%a7%d8%b1%d8%aa/?unapproved=102667&moderation-hash=07971b4ec5b4b2280717880eaee0c6f5&bs-comment-added=1#comment-102667
http://cien-byarhair.com/archives/13455?unapproved=3697989&moderation-hash=bc0b0b7d0e462b0cc5612c113270a191#comment-3697989
https://hipnomedia.com/foro/adiccion-al-tabaco-dejar-de-fumar/viagra-in-girls-drink-bj-nt-t110734.html

eilszdualp

幼儿园
帖子
金钱
魅力
威望
注册
2020-04-08 
eilszdualp 发表于 2020-04-08 07:31   
RE:Linux Bash严重漏洞修复
viagra average age  best cheap viagra pharmacies canadian  <a href="  https://viagrnetwork.com/#">viagra boner  </a>  stepmom viagra  pharmacy viagra

viagra multiple cums  viagra coupons printable  viagra prices   why does viagra make u flushed  viagra milf nude

https://viagrnetwork.com/# - levitra vs viagra


https://www.net-worm.com/blog-post/%e7%bf%a0%e8%8a%b1%e5%92%b8%e5%bc%b9%e8%a5%bf%e4%b8%9c%e6%a2%a6%e3%80%81%e6%9f%b3%e6%96%b0%e5%91%a2%e5%96%83%e5%8c%97%e5%8d%97%e5%88%86/?unapproved=58146&moderation-hash=4c8b3df98c2c6310813d24fb2197d188#comment-58146
https://webbaohiem.net/dnnn-khong-duoc-phep-dau-tu-ngoai-nganh.html?unapproved=1218542&moderation-hash=874616149ab7003dd5d7cfd2077efa17#comment-1218542
https://bathcarpetremnants.co.uk/product/gala-cord-champagne-mist-felt-5-50m-x-4m/?unapproved=23068&moderation-hash=32c9e6c194883f11acdc5b1c5c1c9d56#comment-23068
http://forum.digilyze.info/viewtopic.php?f=2&t=835580&p=886102#p886102
http://nytva.org/memberlist.php?mode=viewprofile&u=108902

lvejmdualp

幼儿园
帖子
金钱
魅力
威望
注册
2020-04-09 
lvejmdualp 发表于 2020-04-09 14:14   
RE:Linux Bash严重漏洞修复
personal loans quick  quick pay payday loans new york state  <a href="  http://www.stockdocs.ru/ ">quick loans</a>  quick pay payday loans new york state  quick loans 100% approval

quick loans online direct deposit  quick and loans rates  quick loans  quick cash loans incorp huntington park ca  quick loan home loans
  • 回复
31条记录