From: Daniel47@teranews,com   
      
   On 30/09/14 02:25, William Unruh wrote:   
   > On 2014-09-29, Daniel47@teranews,com  wrote:   
   >> On 29/09/14 05:22, William Unruh wrote:   
   >>> On 2014-09-28, Markus R. Ke?ler  wrote:   
   >>>> Hi everybody,   
   >>>>   
   >>>> sure, you've already heard from one of the most severe bugs in linux   
   >>>> bash these days.   
   >>>>   
   >>>> On my redhat machines it was no big challenge to fix the bug, because   
   >>>> redhat created a patched version and put it into their repositories.   
   >>>>   
   >>>> Unfortunately, this is not possible with mandriva, of course.   
   >>>   
   >>> Well, it is. Madriva had patches out. But 2009.1 is 5 years old. Redhat   
   >>> also doe not support 5 year old OSs.   
   >>> You could always download bash source from a mageia mirror   
   >>> (bash-4.2-49.1mga3.src.rpm) and compile it on your 2009.1 system.   
   >>>   
   >>>>   
   >>>> So, on a box with mandriva 2009.1 / kernel 2.6.39.4, I got the shell   
   >>>> sources and all patches from gnu.org, applied the patches successively   
   >>>> and configured and made the executable.   
   >>>   
   >>> You do not tell use which source you got and which patches.  It is all   
   >>> patches up to 49 --  bash42-049 that you need. Note that you need ALL   
   >>> the patches, not just the last one.   
   >>   
   >> William, I'm still using Mandriva 2009.0 myself (because I cannot work   
   >> out how to get the other various Mandriva/Mageia to connect to the   
   >> Internet using my 3G USB Dongle)   
   >>   
   >> Could you provide pointers as to how I, and others, can download and   
   >> install the requisite updates so that we can be safe, again??   
   >   
   > Well, I would first try downloading Mageia's bash-4.2-49.1mga.src.rpm   
   > and compiling it on your system   
   > rpmbuild --rebuild bash-4.2-49.1mga.src.rpm   
   > That will either work, ask for some development rpms to be installed, or   
   > not work because your libraries are too old.   
   >   
   > The only possible impediment I can see  would be that it wants autoconf2.5   
   >   
   > To protect yourself just in case there is a disaster, save /bin/bash   
   > (eg, cp /bin/bash /bin/bash.old) change the default shell for root to   
   > dash   
   > (edit /etc/passwd and put dash into the root: line rather thanbash,   
   > making sure that you have dash installed)   
   >   
   > You can switch back later after you have made sure the new bash works   
   >   
   >   
   > Assuming it works, then just do   
   > rpm -Uvh /usr/src/rpm/RPMS/i586/bash-4.2*   
   > and you are away to the races.   
   >   
   > Note that you will then have to reedit /etc/passwd to put bash back as   
   > root's shell.   
   >   
   >>   
   >> Daniel   
   >>   
   >>   
   Thanks for these directions, William. Call me Chicken if you like, but,   
   as well as this Laptop, I have MD2009.0 installed on my (almost unused)   
   Desktop computer, so I'll try the upgrade on that first!!   
      
   Fingers crossed.   
      
   Daniel   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)