From owner-freebsd-questions@FreeBSD.ORG Sun Sep 28 21:40:09 2014 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id A7CEFC29 for ; Sun, 28 Sep 2014 21:40:09 +0000 (UTC) Received: from mail-lb0-f174.google.com (mail-lb0-f174.google.com [209.85.217.174]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 2D119BB1 for ; Sun, 28 Sep 2014 21:40:08 +0000 (UTC) Received: by mail-lb0-f174.google.com with SMTP id l4so16826618lbv.19 for ; Sun, 28 Sep 2014 14:40:01 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:content-type; bh=oC/2KaknqqrJ8MQhoJpb3L8LcHbkUqZ2Q7gR3Xt0pYU=; b=HnN3tS9CR03Lyu3K9Kgw6+c53C7J5MUFZ2DiUw6H+TTojD5aKhW62gFO6O8pFuBw1B l0mp/oCdG2KTT0ELBCBUpXa1Nb/DngUGw6su0thfmFVSIwdJNxQ6UlLzn2xtc6Ph7j12 EJrxMsv0fosZOd+Rs9tr0ijaZ29YwMeVTt5ocJCepVK4uV9wgXw8Q4QS4mqY6sIgW3S3 tFoQRkFpuIQhFmz48HQqeQRNpa1Bhw0taL/rGigvEiQk9VwFapqIcEQPajakl/KoqrSK rVKXjN+aSIf/N53spEcYlxQC5+9IUQAQMCwqo2I+Hdea7cngWlbiPMciW14oMqCRvVzJ z7RQ== X-Gm-Message-State: ALoCoQk4GsPzkdZnYFgWj43Us+OhYxGKbOckV0KJeNwnE8PSJDFH7KE1D1WRNMXtU7xmWKHsFBwl MIME-Version: 1.0 X-Received: by 10.112.16.129 with SMTP id g1mr32948420lbd.19.1411940400934; Sun, 28 Sep 2014 14:40:00 -0700 (PDT) Received: by 10.25.20.159 with HTTP; Sun, 28 Sep 2014 14:40:00 -0700 (PDT) X-Originating-IP: [70.209.203.3] Received: by 10.25.20.159 with HTTP; Sun, 28 Sep 2014 14:40:00 -0700 (PDT) In-Reply-To: References: Date: Sun, 28 Sep 2014 14:40:00 -0700 Message-ID: Subject: Re: BASH Shellshock and FreeBSD 4.X From: "Brian W." To: FreeBSD Mailing List Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.18-1 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 28 Sep 2014 21:40:09 -0000 For your ancient system I would do 2 things. 1 Run one of the well publicized ways to check your system and see if it is vulnerable. The ancientness of your system suggests someone doesn't care honestly. 2 If it is then try to get the bash using users to another shell. On Sep 28, 2014 2:28 PM, "Everett Batey" wrote: > For SO OLD an FBSD .. will this try to immediately move me up over a > decade and maybe crash my very highly depended OLDBSD server ??? > > > On Sun, Sep 28, 2014 at 2:04 PM, Brian W. wrote: > > Re the bash query do you use portsnap? Presuming the old package system > the > > easiest answer is portsnap fetch update and then portupgrade -P bash. > > > > Brian > > > > On Sep 28, 2014 1:59 PM, "Everett Batey" wrote: > >> > >> Severely stuck in Time - OLD FBSD .. any bright ideas around /bin/bash > >> risks AND NOT DONT TELL ME UPDATE FBSD .. - Dependencies I can NOT > >> escape .. > >> > >> On other hand for FreeBSD 9.1-RELEASE-p7 is there an equivalent of yum > >> update bash? > >> > >> > >> -- > >> Thnx / Everett (Flames PLEASE, I old and Cold) > >> _______________________________________________ > >> freebsd-questions@freebsd.org mailing list > >> http://lists.freebsd.org/mailman/listinfo/freebsd-questions > >> To unsubscribe, send any mail to > >> "freebsd-questions-unsubscribe@freebsd.org" > > > > -- > R/ Everett Batey / Skype: wa6cre-10 / efbatey@gmail.com > or efbarc@cotdazr.org or wa6cre@rabbitradio.org or lioneverett@gmail.com > Auxiliary Lions 4-A3 Web Lions 4-A3 Calendar / CrisisLinks > http://bit.ly/cw95Um > (805) 616-2471 / G-Talk/Twitter: efbatey / CrisisLinks > http://bit.ly/cw95Um > Please visit So Calif Linux Expo http://www.socallinuxexpo.org >