ReLinuxBash严重漏洞修复紧急通知
不错,按上面的方法,已修复!!!
-------------------------
ReLinuxBash严重漏洞修复紧急通知
#
yum update bash-4.1.2-15.el6_5.1
Loaded plugins: fastestmirror, security
Loading mirror speeds from cached hostfile
* rpmforge: ftp.riken.jp
Setting up Update Process
Resolving Dependencies
--> Running transaction check
---> Package bash.x86_64 0:4.1.2-15.el6_4 will be updated
---> Package bash.x86_64 0:4.1.2-15.el6_5.1 will be an update
--> Finished Dependency Resolution
Dependencies Resolved
==============================================================================
Package Arch Version Repository Size
==============================================================================
Updating:
bash x86_64 4.1.2-15.el6_5.1 updates 905 k
Transaction Summary
==============================================================================
Upgrade 1 Package(s)
Total download size: 905 k
Is this ok [y/N]:
y
Downloading Packages:
bash-4.1.2-15.el6_5.1.x86_64.rpm | 905 kB 00:00
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
Warning: RPMDB altered outside of yum.
** Found 8 pre-existing rpmdb problem(s), 'yum check' output follows:
lanmp_wdcp-2-5.el6.x86_64 has missing requires of perl(DBI)
lanmp_wdcp-2-5.el6.x86_64 has missing requires of perl(Time::HiRes)
lanmp_wdcp-2-5.el6.x86_64 has missing requires of perl(lib::mtr_gcov.pl)
lanmp_wdcp-2-5.el6.x86_64 has missing requires of perl(lib::mtr_gprof.pl)
lanmp_wdcp-2-5.el6.x86_64 has missing requires of perl(lib::mtr_io.pl)
lanmp_wdcp-2-5.el6.x86_64 has missing requires of perl(lib::mtr_misc.pl)
lanmp_wdcp-2-5.el6.x86_64 has missing requires of perl(lib::mtr_process.pl)
lanmp_wdcp-2-5.el6.x86_64 has missing requires of perl(mtr_misc.pl)
Updating : bash-4.1.2-15.el6_5.1.x86_64 1/2
Cleanup : bash-4.1.2-15.el6_4.x86_64 2/2
Verifying : bash-4.1.2-15.el6_5.1.x86_64 1/2
Verifying : bash-4.1.2-15.el6_4.x86_64 2/2
Updated:
bash.x86_64 0:4.1.2-15.el6_5.1
Complete!
[root@ ~]#
shutdown -r now
Broadcast message from root@~
(/dev/pts/0) at 21:27 ...
The system is going down for reboot NOW!
[root@~]#
Connection closed by foreign host.
Type `help' to learn how to use Xshell prompt.
Xshell:\>
Welcome to aliyun Elastic Compute Service!
[root@A]#
env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
bash: warning: x: ignoring function definition attempt
bash: error importing function definition for `x'
this is a test
红色部分为输入代码,其它为系统执行部分