From owner-freebsd-questions@FreeBSD.ORG Mon Sep 29 21:36:42 2014 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 94505A77 for ; Mon, 29 Sep 2014 21:36:42 +0000 (UTC) Received: from mail-qc0-x233.google.com (mail-qc0-x233.google.com [IPv6:2607:f8b0:400d:c01::233]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4B33AB5C for ; Mon, 29 Sep 2014 21:36:41 +0000 (UTC) Received: by mail-qc0-f179.google.com with SMTP id x3so2541529qcv.10 for ; Mon, 29 Sep 2014 14:36:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bsd.com.br; s=capeta; h=date:from:to:subject:message-id:in-reply-to:references:organization :mime-version:content-type:content-transfer-encoding; bh=1wcphf5c80J2wVr9Q/NvsYZ9CMGyWtEAs/KOXut39EI=; b=Dv7CNuvzWUX59HJ4YgJHrqTARmsTVf4JiVFNG7BEPc1HdQvxjTG0Mu2yy/CXH0bs37 Qygk5KGQfGBHLkNV/e4b21y1OXG3Y/IRJSe3Q7NP5b3D80vRAldnwtmYj61Ya1tiBzCx Wn9JcGLEQknv0JmSXVokh3Yc7Jvn6keGIwLlc= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:date:from:to:subject:message-id:in-reply-to :references:organization:mime-version:content-type :content-transfer-encoding; bh=1wcphf5c80J2wVr9Q/NvsYZ9CMGyWtEAs/KOXut39EI=; b=Z+0iwRYrhmv/GXJhQ4yCsiD19ZqTXAcPydlDEQaOgxrHiLtob6hBM4mmnoioSXuWGI 6fQHx6D32IVPO7AeePFT4q9ZO4fRfxRcgEhTUEpSH/9ypxCkkVwNg7W764BP8Kwzv+SW a/hX+//k6UiRASE6TORweRhaJ54QVhBB3uHODkDMjPJIzjn7yWKd6pdaLdwaD86WQzj0 1jWeHQ95R2XQIoLLbKxuxFWqBoZNIoVi2amCM5lslY33pvS/nlyQlZ6xy/xUIA5vKkua OpjU2rw37yWCY66W7DDoZykTBtKU9gEb3fve29rP8EmzW7rJh9P+to44m44FG4H6u64O FK1Q== X-Gm-Message-State: ALoCoQl/E/y6ze1X6wJUlaf4xuJO0TnhWvvuHCD1XIe6o7GufYJW/vPqF3ObG1f5ZVnwpQN29P3O X-Received: by 10.224.86.68 with SMTP id r4mr33724024qal.0.1412026600066; Mon, 29 Sep 2014 14:36:40 -0700 (PDT) Received: from Papi ([177.43.10.42]) by mx.google.com with ESMTPSA id 4sm12220866qax.48.2014.09.29.14.36.39 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 29 Sep 2014 14:36:39 -0700 (PDT) Date: Mon, 29 Sep 2014 18:36:55 -0300 From: Mario Lobo To: freebsd-questions@freebsd.org Subject: Re: BASH Shellshock and FreeBSD 4.X Message-ID: <20140929183655.361534e8@Papi> In-Reply-To: <20140929172329.08163a41.freebsd@edvax.de> References: <20140929100937.0527cbae.freebsd@edvax.de> <5429579A.7030501@ShaneWare.Biz> <20140929172329.08163a41.freebsd@edvax.de> Organization: BSD X-Mailer: Claws Mail 3.10.1 (GTK+ 2.24.22; amd64-portbld-freebsd10.0) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Sep 2014 21:36:42 -0000 On Mon, 29 Sep 2014 17:23:29 +0200 Polytropon wrote: > On Mon, 29 Sep 2014 22:29:06 +0930, Shane Ambler wrote: > > On 29/09/2014 17:39, Polytropon wrote: > > > On Sun, 28 Sep 2014 13:59:13 -0700, Everett Batey wrote: > > >> Severely stuck in Time - OLD FBSD .. any bright ideas > > >> around /bin/bash risks AND NOT DONT TELL ME UPDATE FBSD .. - > > >> Dependencies I can NOT escape .. > > > > > If you're using ports: > > > > > > # portsnap fetch update > > > # cd /usr/ports/shells/bash > > > # make deinstall > > > # make > > > # make reinstall > > > > > > > I'm not 100% certain that the current ports tree will work on 4.x > > > > I'd keep a copy of your current tree before trying updates. If you > > have trouble with the current ports then put the old version back > > in place and look at the changes made to fix the issue and > > incorporate them into your tree. > > Yes, _that_ might be a problem... > > On the other hand, maybe it would even be possible to check > out the current source for bssh (and maybe its dependencies) > and build them "off the track", i. e., not using the ports > infrastructure at all, and then manually copying the resulting > binary to the required place, as well as its libraries (unless > static linking has been enabled). It's worth having a look at > ./configure's options to tune this approach. > > Everett; Why don't you give this a try: #--------------------------- #cat bash_bsd_fix.sh mkdir src cd src fetch http://ftp.gnu.org/gnu/bash/bash-4.3.tar.gz for i in $(jot -w %03d 25); do fetch http://ftp.gnu.org/gnu/bash/bash-4.3-patches/bash43-$i; done tar zxvf bash-4.3.tar.gz cd bash-4.3 for i in $(jot -w %03d 25);do patch -p0 < ../bash43-$i; done ./configure && make #--------------------------- If it compiles without errors, then: #--------------------------- make install cd .. cd .. rm -r src #--------------------------- I got this script from a colleague in the Brazilian BSD list. He used it to update his old servers. It was tested only on 8.1 and up but I don't see why you can't give it a spin. I used it withou any problems on all my 8.x servers. -- Mario Lobo http://www.mallavoodoo.com.br FreeBSD since 2.2.8 [not Pro-Audio.... YET!!] (99% winblows FREE) "UNIX was not designed to stop you from doing stupid things, because that would also stop you from doing clever things."