shellshock - detect in Apache?
Gary Stainburn
gary.stainburn at ringways.co.uk
Fri Sep 26 13:35:46 UTC 2014
>
> Another option would be to build the latest version of bash.
> ftp://ftp.gnu.org/gnu has serveral versions of bash a number of them have
> patch directories with Sep 24th date.
>
> I download the
> ftp://ftp.gnu.org/gnu/bash/bash-4.3.tar.gz
> and the patches in
> ftp://ftp.gnu.org/gnu/bash/bash-4.3-patches/
>
> Installed the 25 patches and then build the code.
> Running the test on that version of bash passes the test.
>
> Don't know if there would be any issues with then replacing the older bash
> on a system with the newly build one, but that didn't take much time to
> build.
Thanks for this Michael.
I'll attempt this. As someone who hasn't built from source code in decades,
how do I apply the patches to the source tree before building?
Gary
More information about the users
mailing list