Solaris 10 如何处理Bash远程任意代码执行安全漏洞？
哪位大侠知道Solaris 10如何处理Bash远程任意代码执行安全漏洞呢？我用pkgutil更新的bash，新的bash安装路径是/opt/csw/bin/bash。
安装过程及结果如下：
# /opt/csw/bin/pkgutil -y -i bash
=> Fetching new catalog and descriptions (http://mirror.opencsw.org/opencsw/testing/i386/5.10) if available ...
==> 3746 packages loaded from /var/opt/csw/pkgutil/catalog.mirror.opencsw.org_opencsw_testing_i386_5.10
Solving needed dependencies ...
Solving dependency order ...
7 CURRENT packages:
CSWcas-texinfo-1.42,REV=2010.11.26
CSWcommon-1.5,REV=2010.12.11
CSWggettext-data-0.18.1.1,p,REV=2011.03.15
CSWiconv-1.14,REV=2011.08.08
CSWlibcharset1-1.14,REV=2011.08.07
CSWlibiconv2-1.14,REV=2011.08.07
CSWlibintl8-0.18.1.1,p,REV=2011.03.15
Install 2 NEW packages:
CSWbash-4.3.25,REV=2014.09.26 (opencsw/testing)
CSWcas-etcshells-1.45,REV=2011.07.12 (opencsw/testing)
Total size: 2.1 MB
=> Fetching CSWcas-etcshells-1.45,REV=2011.07.12 (1/2) ...
=> Fetching CSWbash-4.3.25,REV=2014.09.26 (2/2) ...
=> Installing CSWcas-etcshells-1.45,REV=2011.07.12 (1/2) ...
Please see /opt/csw/share/doc/cas_etcshells/license for license information.
Installation of <CSWcas-etcshells> was successful.
=> Installing CSWbash-4.3.25,REV=2014.09.26 (2/2) ...
Please see /opt/csw/share/doc/bash/license for license information.
Installing class <cswetcshells> ...
Creating /etc/shells with default set of shells (see: man shells)
Registering /opt/csw/bin/bash in /etc/shells.
Installing class <cswtexinfo> ...
/opt/csw/share/info/bash.info (texinfo will be registered when CSWtexinfo is installed)
Installation of <CSWbash> was successful.
查看默认的bash版本：
# bash -version
GNU bash, version 3.00.16(1)-release (i386-pc-solaris2.10)
Copyright (C) 2004 Free Software Foundation, Inc.
查看新更新的bash的版本号，出现错误了：
# /opt/csw/bin/bash -version
ld.so.1: bash: 致命的: libc.so.1: 版本`SUNW_1.22.5'未找到(文件 /opt/csw/bin/bash必需的)
ld.so.1: bash: 致命的: libc.so.1: 打开失败: 无此文件或目录
被杀掉
大侠，受累告诉我如何处理这个棘手问题，谢谢指导！ You need this:
SunOS 5.10_x86: bash patch (Patch) 126547-07.zip 2.4 MB 请问楼上大侠能提供下载地址吗？我的是5.10 sparc平台的，谢谢！ 给个下载地址，sparc 64bit多谢！回复 2# watchsat
回复 1# anfy
一个大神的解决方法：
#LD_NOVERSION=yes
# export LD_NOVERSION
设置环境变量就可以了！
回复 3# zhmg
看看这个帖子，有帮助：
http://blog.chinaunix.net/uid-113269-id-4533739.html 回复 4# zgq919
看看这个帖子，不知道对你的问题有帮助没有：
http://blog.chinaunix.net/uid-113269-id-4533739.html 本帖最后由 zhmg 于 2014-12-26 13:42 编辑
我全部装完之后，运行报错，请各位大侠帮忙看看，非常感谢！
jinjq# ls -ltr
total 28418
-rw-r----- 1 jinjq other 574464 Dec 26 13:03 now
-rw-r----- 1 jinjq other 955392 Dec 26 13:10 bash_completion-2.1,REV=2014.04.21-SunOS5.10-all-CSW.pkg
-rw-r----- 1 jinjq other 7661056 Dec 26 13:10 bash-4.3.30,REV=2014.10.18-SunOS5.10-i386-CSW.pkg
-rw-r----- 1 jinjq other 7680 Dec 26 13:20 cas_etcshells-1.45,REV=2011.07.12-SunOS5.9-all-CSW.pkg
-rw-r----- 1 jinjq other 7168 Dec 26 13:21 cas_texinfo-1.42,REV=2010.11.26-SunOS5.9-all-CSW.pkg
-rw-r----- 1 jinjq other 22528 Dec 26 13:21 common-1.5,REV=2010.12.11-SunOS5.8-i386-CSW.pkg
-rw-r----- 1 jinjq other 2862592 Dec 26 13:22 ggettext_data-0.18.1.1,p,REV=2011.03.15-SunOS5.9-all-CSW.pkg
-rw-r----- 1 jinjq other 40960 Dec 26 13:22 iconv_stub-1.14,REV=2011.08.08-SunOS5.9-all-CSW.pkg
-rw-r----- 1 jinjq other 69632 Dec 26 13:22 libcharset1-1.14,REV=2011.08.07-SunOS5.9-i386-CSW.pkg
-rw-r----- 1 jinjq other 1979392 Dec 26 13:23 libiconv2-1.14,REV=2011.08.07-SunOS5.9-i386-CSW.pkg
-rw-r----- 1 jinjq other 289280 Dec 26 13:23 libintl8-0.18.1.1,p,REV=2011.03.15-SunOS5.9-i386-CSW.pkg
jxdns02ber# pkgadd -d bash-4.3.30,REV=2014.10.18-SunOS5.10-i386-CSW.pkg
The following packages are available:
1CSWbash bash - A sh-compatible command language interpreter
(i386) 4.3.30,REV=2014.10.18
Select package(s) you wish to process (or 'all' to process
all packages). (default: all) [?,??,q]: all
Processing package instance <CSWbash> from </export/home/jinjq/jinjq/bash/bash-4.3.30,REV=2014.10.18-SunOS5.10-i386-CSW.pkg>
bash - A sh-compatible command language interpreter(i386) 4.3.30,REV=2014.10.18
This appears to be an attempt to install the same architecture and
version of a package which is already installed.This installation
will attempt to overwrite this package.
Please see /opt/csw/share/doc/bash/license for license information.
Using </> as the package base directory.
## Processing package information.
## Processing system information.
63 package pathnames are already properly installed.
## Verifying package dependencies.
## Verifying disk space requirements.
## Checking for conflicts with packages already installed.
## Checking for setuid/setgid programs.
Installing bash - A sh-compatible command language interpreter as <CSWbash>
## Installing part 1 of 1.
[ verifying class <none> ]
Installing class <cswetcshells> ...
[ verifying class <cswetcshells> ]
Installing class <cswtexinfo> ...
[ verifying class <cswtexinfo> ]
Installation of <CSWbash> was successful.
jinjq# /opt/csw/bin/bash -version
/opt/csw/bin/bash: Invalid argument 有没有补丁的下载链接 求 下补丁是要有MOS账号的.
页:
[1]