關(guān)于bash 2.05b升級(jí)

cate1019

因?yàn)閎ash漏洞升級(jí)bash 2.05b

http://ftp.gnu.org/gnu/bash/上已有bash 205b-13的patch

嘗試修改builtins/evalstring.c,在struct fd_bitmap *bitmap后面加入

1.               if ((flags & SEVAL_FUNCDEF) && command->type != cm_function_def)
   
2.                   {
   
3.                   internal_warning ("%s: ignoring function definition attempt", from_file);
   
4.                   should_jump_to_top_level = 0;
   
5.                   last_result = last_command_exit_value = EX_BADUSAGE;
   
6.                   break;
   
7.                   }
   

復(fù)制代碼

編譯后提示evalstring.c:207: `SEVAL_FUNCDEF' undeclared (first use in this function)

有高手能否提點(diǎn)一二，操作系統(tǒng)是Linux 7.3 ，目前狀況暫時(shí)無法升級(jí)操作系統(tǒng)，

7.3的yum也安裝，yum update bash 提示沒有更新。

cattiger

下載bash源代碼及補(bǔ)丁，patch 補(bǔ)丁后，./configure; make ;make install

cate1019

回復(fù) 2# cattiger

非常感謝，已經(jīng)完成補(bǔ)丁，完成方法如下

1.下載源代碼包和補(bǔ)丁包

源代碼包

1. http://ftp.gnu.org/gnu/bash/bash-2.05b.tar.gz

復(fù)制代碼

補(bǔ)丁包，按照日期排序應(yīng)該 008-013是解決此次破殼漏洞的補(bǔ)丁

1. 
   
2. http://ftp.gnu.org/gnu/bash/bash-2.05b-patches/bash205b-001
   
3. http://ftp.gnu.org/gnu/bash/bash-2.05b-patches/bash205b-002
   
4. http://ftp.gnu.org/gnu/bash/bash-2.05b-patches/bash205b-003
   
5. http://ftp.gnu.org/gnu/bash/bash-2.05b-patches/bash205b-004
   
6. http://ftp.gnu.org/gnu/bash/bash-2.05b-patches/bash205b-005
   
7. http://ftp.gnu.org/gnu/bash/bash-2.05b-patches/bash205b-006
   
8. http://ftp.gnu.org/gnu/bash/bash-2.05b-patches/bash205b-007
   
9. http://ftp.gnu.org/gnu/bash/bash-2.05b-patches/bash205b-008
   
10. http://ftp.gnu.org/gnu/bash/bash-2.05b-patches/bash205b-009
    
11. http://ftp.gnu.org/gnu/bash/bash-2.05b-patches/bash205b-010
    
12. http://ftp.gnu.org/gnu/bash/bash-2.05b-patches/bash205b-011
    
13. http://ftp.gnu.org/gnu/bash/bash-2.05b-patches/bash205b-012
    
14. http://ftp.gnu.org/gnu/bash/bash-2.05b-patches/bash205b-013
    

復(fù)制代碼

下載完成后，

1. tar zxvf bash-2.05b.tar.gz
   
2. cd bash-2.05b
   
3. patch -p0 < ../bash205b-008

復(fù)制代碼

會(huì)出現(xiàn)如下提示

1. patching file builtins/common.h
   
2. patching file builtins/evalstring.c
   
3. patching file variables.c
   

復(fù)制代碼

依次執(zhí)行

1. patch -p0 < ../bash205b-009
   
2. patch -p0 < ../bash205b-008
   
3. patch -p0 < ../bash205b-010
   
4. patch -p0 < ../bash205b-011
   
5. patch -p0 < ../bash205b-012
   
6. patch -p0 < ../bash205b-013

復(fù)制代碼

最后再

1. ./configure
   
2. make install

復(fù)制代碼

測(cè)試

1. env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
   

復(fù)制代碼

顯示

1. this is a test

復(fù)制代碼

感謝任何給我?guī)椭�的人，希望我也可以幫到其他�?br />