From owner-freebsd-questions@FreeBSD.ORG Tue Sep 30 10:06:13 2014 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id C5194C1D for ; Tue, 30 Sep 2014 10:06:13 +0000 (UTC) Received: from smtp.infracaninophile.co.uk (smtp6.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3cd3:cd67:fafa:3d78]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "ca.infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 6CA47F3D for ; Tue, 30 Sep 2014 10:06:13 +0000 (UTC) Received: from ox-dell39.ox.adestra.com (no-reverse-dns.metronet-uk.com [85.199.232.226] (may be forged)) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.14.9/8.14.9) with ESMTP id s8UA5slb004617 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO) for ; Tue, 30 Sep 2014 11:06:01 +0100 (BST) (envelope-from matthew@freebsd.org) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=freebsd.org DKIM-Filter: OpenDKIM Filter v2.9.2 smtp.infracaninophile.co.uk s8UA5slb004617 Authentication-Results: smtp.infracaninophile.co.uk/s8UA5slb004617; dkim=none reason="no signature"; dkim-adsp=none; dkim-atps=neutral X-Authentication-Warning: lucid-nonsense.infracaninophile.co.uk: Host no-reverse-dns.metronet-uk.com [85.199.232.226] (may be forged) claimed to be ox-dell39.ox.adestra.com Message-ID: <542A807B.6040107@freebsd.org> Date: Tue, 30 Sep 2014 11:05:47 +0100 From: Matthew Seaman User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:31.0) Gecko/20100101 Thunderbird/31.1.0 MIME-Version: 1.0 To: freebsd-questions@freebsd.org Subject: Re: Bash Shellshock Bug References: <20140930110034.a637ab6d.freebsd@edvax.de> In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="I8BnkXCcPmhOVPAG4OnaGUqtLUOghuW2q" X-Virus-Scanned: clamav-milter 0.98.4 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-0.9 required=5.0 tests=AWL,BAYES_00, RCVD_IN_DNSWL_BLOCKED,RDNS_NONE,SPF_SOFTFAIL autolearn=no autolearn_force=no version=3.4.0 X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on lucid-nonsense.infracaninophile.co.uk X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Sep 2014 10:06:14 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --I8BnkXCcPmhOVPAG4OnaGUqtLUOghuW2q Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 09/30/14 10:10, Sandeep Gangadharan1 wrote: > Is there anyway to get patch for my FreeBSD 6.2 . If I enable internet= > connection is it possible. > I cannot upgrade the version right now. >=20 > Can you please share the method of upgrading the package. You're using a version of FreeBSD that is long out of support and that itself has a number of known security problems. Not only that, it is so old that you can't use a recent version of the ports tree on it. Therefore your only options are: 1) Upgrade or reinstall the machine using a recent and supported version of FreeBSD. This is what I would choose unless there was a very good reason why not.[*] 2) Build bash manually from sources outside of the ports system. This will screw up your ability to manage updating it cleanly in future. 3) Delete bash entirely and force all your users to use a different shell. Converting shell scripts from bash to sh is frequently trivial, but may involve some significant refactoring depending on what code constructs are in use. Cheers, Matthew --I8BnkXCcPmhOVPAG4OnaGUqtLUOghuW2q Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQJ8BAEBCgBmBQJUKoCCXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQxOUYxNTRFQ0JGMTEyRTUwNTQ0RTNGMzAw MDUxM0YxMEUwQTlFNEU3AAoJEABRPxDgqeTnKrAQAK7kg2M++GmDTtMdhtNOGm2O /Mf92sTcfUwnhdPbAlyRbf18Wv1bg4d4g6Ikec3bqs0o6yTxqeLfahjwiioXl+fz qg1+KTvE0BHfKgYaseCoN+BMmbL79tP+xfjxUki1qEpEJlo/Uqscjse717ewnfXv FEWPd0hZD3XF/rmoqjR8IJC6bIuNeqvuCTFbKBCBGoOnezeJ8bE1LhYvATMrL4ob D6WK3yzdc3F4hx62DT7QdMXmj21GA/dRwNgneeW6lkPj6iGWs863vs0Qvlbr+3jh kKB5GwEp37TYfOsyiesgaIBDPbE1dofmbQ+SwFQdzO02hEDZga91C11NCUQ6h9PM qDC97ivttW2h/JrO4snA38nsqTAn6A0pRftnLEmssiV0e3ODHbB66a4TQzniqbRm WNXfuJZC/GR+A9ZN54eUXe1mgX7x8d4E1FB2/vIhIFuWhI23tWroGIHk8PiZ4vRn ZSrlENjglaDASOJABZccH5Ocfcwz+GtdNpfXX5BRBPsJCVwt/WYUbxGfPSGxJGjX YbUWClRbUCVL/ye6IEUPOQmTNemFQSCPYBt7qvdASoH9xiOR0r1Vf1kW2dYH2bVi +A22yNCc7HN978ewIABBhYLFGvduYit5Y5uJKwk9p0p0us2/lNEj/DnkAA6OasEC NrMYZo9o5V2yyOUpm8pG =XpPK -----END PGP SIGNATURE----- --I8BnkXCcPmhOVPAG4OnaGUqtLUOghuW2q--