Bash update for ShellShock

SUSE Linux Enterprise Server SLES Configure-Administer
1

hello guys, after installing the bash update patch for SLES-SP2.

And did this command below:
env X="() { :;} ; echo busted" /bin/sh -c “echo completed”
env X="() { :;} ; echo busted" which bash -c “echo completed”

It still shows “busted”.

How to ensure that the system is free from Shellshock bug?

Thanks. :slight_smile:

2

[QUOTE=JJJCR;23896]hello guys, after installing the bash update patch for SLES-SP2.

And did this command below:
env X="() { :;} ; echo busted" /bin/sh -c “echo completed”
env X="() { :;} ; echo busted" which bash -c “echo completed”

It still shows “busted”.

How to ensure that the system is free from Shellshock bug?

Thanks. :)[/QUOTE]

There’s actually been two bash updates recently, one on the 24th and another yesterday. Which update are you referring to and which version of SLES are you using? SLES-SP2 could mean SLES 10 SP2 or SLES 11 SP2, but both are out of general support.

If you are using SLES 11 SP2 and have Long Term Service Pack Support then an update, bash-3.2-147.14.22.1, was released yesterday
https://download.suse.com/Download?buildid=5DWQOT2vyus~