From: dimke.fax@uni.de   
      
   Daniel47@teranews,com wrote:   
      
   > On 29/09/14 05:22, William Unruh wrote:   
   >> On 2014-09-28, Markus R. Ke?ler  wrote:   
   >>> Hi everybody,   
   >>>   
   >>> sure, you've already heard from one of the most severe bugs in linux   
   >>> bash these days.   
   >>>   
   >>> On my redhat machines it was no big challenge to fix the bug, because   
   >>> redhat created a patched version and put it into their repositories.   
   >>>   
   >>> Unfortunately, this is not possible with mandriva, of course.   
   >>   
   >> Well, it is. Madriva had patches out. But 2009.1 is 5 years old. Redhat   
   >> also doe not support 5 year old OSs.   
   >> You could always download bash source from a mageia mirror   
   >> (bash-4.2-49.1mga3.src.rpm) and compile it on your 2009.1 system.   
   >>   
   >>>   
   >>> So, on a box with mandriva 2009.1 / kernel 2.6.39.4, I got the shell   
   >>> sources and all patches from gnu.org, applied the patches successively   
   >>> and configured and made the executable.   
   >>   
   >> You do not tell use which source you got and which patches.  It is all   
   >> patches up to 49 --  bash42-049 that you need. Note that you need ALL   
   >> the patches, not just the last one.   
   >   
   > William, I'm still using Mandriva 2009.0 myself (because I cannot work   
   > out how to get the other various Mandriva/Mageia to connect to the   
   > Internet using my 3G USB Dongle)   
   >   
   > Could you provide pointers as to how I, and others, can download and   
   > install the requisite updates so that we can be safe, again??   
   >   
   > Daniel   
      
   Hi Daniel,   
      
   just jump to   
      
   ftp://ftp.gnu.org/gnu/bash/   
      
   I used midnightcommander, mc to download because there are many patch   
   files to download, and so I could just "mark" and copy what I needed.   
      
   For the latest bash you need   
      
   - bash-4.3.tar.gz   
   - the whole bash-4.3-patches tree   
      
   I created a working dir (/tmp/src), put both file and dir there,   
   unpacked the tar.gz from there and jumped into /tmp/src/bash-4.3   
      
   There I applied all patches:   
      
   for i in `ls ../bash-4.3-patches/bash43-0??` ; do   
       echo "$i:" ; patch -p0 < $i ;   
   done   
      
   Then I replaced the bash currently in use with the new one. This was a   
   little tricky:   
      
   - /etc/passwd, entry for root: /bin/bash ==> /bin/dash   
   - init 3 (kill X.11)   
   - log off (from bash) and on (into dash) under root   
   - verify with lsof | grep /bin/bash that not in use   
   - replace /bin/bash with patched one (chown, chmod correctly)   
   - undo /etc/passwd modification (dash ==> bash)   
   - init 5   
   - log off from dash, log on into bash   
      
   Best regards,   
      
   Markus   
      
   --   
   Please reply to group only.   
   For private email please use http://www.dipl-ing-kessler.de/email.htm   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)