Last update at :2024-06-12,Edit by888u
Today Red Hat announced that it discovered that Bash Shell has a security vulnerability. Hackers can use the vulnerability to launch attacks. In short, the problem is very serious. Since it is discovered, we must solve the problem. For a while, we still haven’t figured out the specific reason. , in short, just fix the loopholes. Theoretically speaking, since it has been announced, it means that this vulnerability has been discovered long ago. Now that it has been announced, we must solve it, because users with ulterior motives will show their skills in turn.
Article Directory Hide
First, detect whether there is a Bash vulnerability
Second, upgrade bash patches for different systems
First, detect whether there is a Bash vulnerability
env -i X=\\\'() { (a)=>\\\\\\’ bash -c \\’echo date\\’; cat echo
Execute the above command, if the following feedback message appears saying that there is a vulnerability that needs to be patched.
If the above characters appear, it means there is a vulnerability, and then see the following to upgrade the patch according to different system environments.
Second, upgrade bash patches for different systems
What Snail needs to say is that in case we need to make a backup first, in case there is an incompatibility problem and a system error occurs, we can also make a remedial backup. If snapshot backup is possible, snapshot backup will be performed. Otherwise, backup the website and database. . At the time of writing this article, Snail has been successfully tested on centos and debian.
A – centos system
yum clean allyum makecacheyum -y update bash
If it is a centos system, just run the simple script above.
B – Ubuntu system
apt-get updateapt-get -y install –only-upgrade bash
C – debian system
If it is 7.5 64-bit && 32-bit environment running
apt-get updateapt-get -y install –only-upgrade bash
If running in 6.0.x 64-bit environment
wget https://soft.laozuo.org/systems/bash_4.1-3+deb6u2_amd64.deb&& dpkg -i bash_4.1-3+deb6u2_amd64.deb
If running in 6.0.x 32-bit environment
wget https://soft.laozuo.org/systems/bash_4.1-3+deb6u2_i386.deb&&dpkg -i bash_4.1-3+deb6u2_i386.deb
Finally, let’s see what the feedback information looks like when we run the first step of script detection.
If you can see:
date
This kind of feedback information indicates that the patch is completed. Support We have completed the fix for the Linux Bash security vulnerability.
Recommended site search: website space provider, free virtual host application, free php mysql space, http proxy ip, Hong Kong free virtual host, US server rental, registration number cloud virtual host, Korean website Domain name, online registration inquiry,
发表评论