[blfs-support] Important: Fix for shellshock bash bug

Jamenson Ferreira Espindula de Almeida Melo jafesp at gmail.com
Fri Sep 26 19:23:41 PDT 2014


All right!

I have installed readline-6.3 and after bash-4.3.26-release with _no
problems_.

I run the two tests: (env x='() { :;}; echo vulnerable' bash -c 'echo this
is a test') and (X='() { (a)=>\' bash -c "echo date"); everything looks
good by now.

Thank you, Bruce Dubbs!



2014-09-26 19:35 GMT-03:00 Bruce Dubbs <bruce.dubbs at gmail.com>:

> Jamenson Ferreira Espindula de Almeida Melo wrote:
>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA256
>>
>>
>>
>> Jaboatão dos Guararapes, PE, 26 de setembro de 2014.
>>
>> Subject: Fix for shellshock bash bug
>>
>>
>> Below is the output of the command [( time make | tee
>> bash-4.3-make-log.txt && exit $PIPESTATUS )]:
>>
>>
>> making lib/tilde/libtilde.a in ./lib/tilde
>> make[1]: Entering directory '/home/jamenson/bash-4.3/lib/tilde'
>> gcc -c  -DHAVE_CONFIG_H -DSHELL  -I. -I../.. -I../.. -I../../include
>> -I../../lib  -g -O2 tilde.c
>> rm -f libtilde.a
>> ar cr libtilde.a tilde.o
>> test -n "ranlib" && ranlib libtilde.a
>> make[1]: Leaving directory '/home/jamenson/bash-4.3/lib/tilde'
>> rm -f bash
>> gcc -L./builtins -L/usr/lib -L/usr/lib -L./lib/glob -L./lib/tilde
>> -L./lib/sh  -rdynamic  -g -O2 -o bash shell.o eval.o y.tab.o general.o
>> make_cmd.o print_cmd.o  dispose_cmd.o execute_cmd.o variables.o
>> copy_cmd.o error.o expr.o flags.o jobs.o subst.o hashcmd.o hashlib.o
>> mailcheck.o trap.o input.o unwind_prot.o pathexp.o sig.o test.o
>> version.o alias.o array.o arrayfunc.o assoc.o braces.o bracecomp.o
>> bashhist.o bashline.o  list.o stringlib.o locale.o findcmd.o redir.o
>> pcomplete.o pcomplib.o syntax.o xmalloc.o  -lbuiltins -lglob -lsh
>> -lreadline -lhistory -lcurses -ltilde     -ldl
>> Makefile:553: recipe for target 'bash' failed
>>
>> I run the command from inside of the actually _running_ BLFS system.
>>
>> Do you have any ideas?
>>
>
> It's hard to tell from that.  Do you have MAKEFLAGS set to anything?  Do
> you have readline-6.3 installed?
>
> After you get bash built, be sure you run ./bash to makes sure it works.
> You should have:
>
> $ echo $BASH_VERSION
> 4.3.26(1)-release
>
> Do this before you 'make install'.
>
>   -- Bruce
>
>
> --
> http://lists.linuxfromscratch.org/listinfo/blfs-support
> FAQ: http://www.linuxfromscratch.org/blfs/faq.html
> Unsubscribe: See the above information page
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.linuxfromscratch.org/pipermail/blfs-support/attachments/20140926/d6466d8b/attachment.html>


More information about the blfs-support mailing list