download and recompile bash to patch the shellshock vulnerability

shellshock-patch.sh

#!/bin/bash

# download and recompile bash to patch the shellshock vulnerability
# http://www.theregister.co.uk/2014/09/24/bash_shell_vuln/
# 
# when built, replace your system /bin/bash (and /bin/sh)
# with bash-4.3/bash
#
# to verify the fix:
# env X="() { :;} ; echo vulnerable" | bash -c "echo completed"
#
# daniel jones <http://www.erase.net>

wget http://ftp.gnu.org/gnu/bash/bash-4.3.tar.gz
tar xzf bash-4.3.tar.gz
cd bash-4.3
wget http://ftp.gnu.org/gnu/bash/bash-4.3-patches/bash43-025
patch -p0 < bash43-025
./configure
make