From: unruh@invalid.ca   
      
   On 2014-09-29, Daniel47@teranews,com  wrote:   
   > On 29/09/14 05:22, William Unruh wrote:   
   >> On 2014-09-28, Markus R. Ke?ler  wrote:   
   >>> Hi everybody,   
   >>>   
   >>> sure, you've already heard from one of the most severe bugs in linux   
   >>> bash these days.   
   >>>   
   >>> On my redhat machines it was no big challenge to fix the bug, because   
   >>> redhat created a patched version and put it into their repositories.   
   >>>   
   >>> Unfortunately, this is not possible with mandriva, of course.   
   >>   
   >> Well, it is. Madriva had patches out. But 2009.1 is 5 years old. Redhat   
   >> also doe not support 5 year old OSs.   
   >> You could always download bash source from a mageia mirror   
   >> (bash-4.2-49.1mga3.src.rpm) and compile it on your 2009.1 system.   
   >>   
   >>>   
   >>> So, on a box with mandriva 2009.1 / kernel 2.6.39.4, I got the shell   
   >>> sources and all patches from gnu.org, applied the patches successively   
   >>> and configured and made the executable.   
   >>   
   >> You do not tell use which source you got and which patches.  It is all   
   >> patches up to 49 --  bash42-049 that you need. Note that you need ALL   
   >> the patches, not just the last one.   
   >   
   > William, I'm still using Mandriva 2009.0 myself (because I cannot work   
   > out how to get the other various Mandriva/Mageia to connect to the   
   > Internet using my 3G USB Dongle)   
   >   
   > Could you provide pointers as to how I, and others, can download and   
   > install the requisite updates so that we can be safe, again??   
      
   Well, I would first try downloading Mageia's bash-4.2-49.1mga.src.rpm   
   and compiling it on your system   
   rpmbuild --rebuild bash-4.2-49.1mga.src.rpm   
   That will either work, ask for some development rpms to be installed, or   
   not work because your libraries are too old.   
      
   The only possible impediment I can see  would be that it wants autoconf2.5   
      
   To protect yourself just in case there is a disaster, save /bin/bash   
   (eg, cp /bin/bash /bin/bash.old) change the default shell for root to   
   dash   
   (edit /etc/passwd and put dash into the root: line rather thanbash,   
   making sure that you have dash installed)   
      
   You can switch back later after you have made sure the new bash works   
      
      
   Assuming it works, then just do   
   rpm -Uvh /usr/src/rpm/RPMS/i586/bash-4.2*   
   and you are away to the races.   
      
   Note that you will then have to reedit /etc/passwd to put bash back as   
   root's shell.   
      
   >   
   > Daniel   
   >   
   >   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)