Skip to content

Instantly share code, notes, and snippets.

@ericchiang
Last active August 29, 2015 14:06
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save ericchiang/561938e125b809f4e91c to your computer and use it in GitHub Desktop.
Save ericchiang/561938e125b809f4e91c to your computer and use it in GitHub Desktop.
Shellshock Ubuntu patch
#!/bin/bash
env X="() { :;} ; echo shellshock" /bin/sh -c "echo completed"
env X="() { :;} ; echo shellshock" `which bash` -c "echo completed"
sudo apt-get update
# for /bin/bash
sudo apt-get upgrade -y bash
# for /bin/sh
sudo rm /bin/sh
sudo ln -s dash /bin/sh
env X="() { :;} ; echo shellshock" /bin/sh -c "echo completed"
env X="() { :;} ; echo shellshock" `which bash` -c "echo completed"
@setharnold
Copy link

/bin/sh should remain a symlink to dash, not bash. Pointing /bin/sh at bash makes things worse...

Really, just apt-get update && apt-get -u dist-upgrade.

@ericchiang
Copy link
Author

Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment