□bashをtarボールからインストール #shellshock

なんだか、秋のbash祭りですね。

『これが終わったらBeer Bashするんだ』 (なんかのフラグっぽい)

で、表題のtarボールからインストールする方法。

もうみんなapt-getとかyumばっかりしてて忘れてないかい？(つーか、そもそもしらねーだろ)

※2014.09.29 パッチが増えてます (´Д｀)ﾊｧ…

mkdir /usr/src/package/

cd /usr/src/package/
wget https://ftp.gnu.org/gnu/bash/bash-3.0.16.tar.gz --no-check-certificate
cd ..
tar xvzf package/bash-3.0.16.tar.gz
cd bash-3.0.16/

wget https://ftp.gnu.org/gnu/bash/bash-3.0-patches/bash30-017 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-3.0-patches/bash30-018 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-3.0-patches/bash30-019 --no-check-certificate

patch -p0 < bash30-017
patch -p0 < bash30-018
patch -p0 < bash30-019

./configure --prefix=/
make
make test
make install

で、

env x='() { :;}; echo vulnerable' bash -c "echo this is a test"

で確認しようね。

※2014.09.29 いちおー違うバージョンのも掲載しておきます (´Д｀)ﾊｧ…

mkdir /usr/src/package/

cd /usr/src/package/
wget https://ftp.gnu.org/gnu/bash/bash-3.2.48.tar.gz --no-check-certificate
cd ..
tar xvzf package/bash-3.2.48.tar.gz
cd bash-3.2.48/

wget https://ftp.gnu.org/gnu/bash/bash-3.2-patches/bash32-049 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-3.2-patches/bash32-050 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-3.2-patches/bash32-051 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-3.2-patches/bash32-052 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-3.2-patches/bash32-053 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-3.2-patches/bash32-054 --no-check-certificate

patch -p0 < bash32-049
patch -p0 < bash32-050
patch -p0 < bash32-051
patch -p0 < bash32-052
patch -p0 < bash32-053
patch -p0 < bash32-054

./configure --prefix=/
make
make test
make install

とか

mkdir /usr/src/package/

cd /usr/src/package/
wget https://ftp.gnu.org/gnu/bash/bash-4.2.tar.gz --no-check-certificate
cd ..
tar xvzf package/bash-4.2.tar.gz
cd bash-4.2/

wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-001 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-002 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-003 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-004 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-005 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-006 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-007 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-008 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-009 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-010 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-011 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-012 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-013 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-014 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-015 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-016 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-017 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-018 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-019 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-020 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-021 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-022 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-023 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-024 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-025 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-026 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-027 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-028 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-029 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-030 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-031 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-032 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-033 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-034 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-035 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-036 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-037 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-038 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-039 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-040 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-041 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-042 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-043 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-044 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-045 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-046 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-047 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-048 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-049 --no-check-certificate
wget https://ftp.gnu.org/gnu/bash/bash-4.2-patches/bash42-050 --no-check-certificate

patch -p0 < bash42-001
patch -p0 < bash42-002
patch -p0 < bash42-003
patch -p0 < bash42-004
patch -p0 < bash42-005
patch -p0 < bash42-006
patch -p0 < bash42-007
patch -p0 < bash42-008
patch -p0 < bash42-009
patch -p0 < bash42-010
patch -p0 < bash42-011
patch -p0 < bash42-012
patch -p0 < bash42-013
patch -p0 < bash42-014
patch -p0 < bash42-015
patch -p0 < bash42-016
patch -p0 < bash42-017
patch -p0 < bash42-018
patch -p0 < bash42-019
patch -p0 < bash42-020
patch -p0 < bash42-021
patch -p0 < bash42-022
patch -p0 < bash42-023
patch -p0 < bash42-024
patch -p0 < bash42-025
patch -p0 < bash42-026
patch -p0 < bash42-027
patch -p0 < bash42-028
patch -p0 < bash42-029
patch -p0 < bash42-030
patch -p0 < bash42-031
patch -p0 < bash42-032
patch -p0 < bash42-033
patch -p0 < bash42-034
patch -p0 < bash42-035
patch -p0 < bash42-036
patch -p0 < bash42-037
patch -p0 < bash42-038
patch -p0 < bash42-039
patch -p0 < bash42-040
patch -p0 < bash42-041
patch -p0 < bash42-042
patch -p0 < bash42-043
patch -p0 < bash42-044
patch -p0 < bash42-045
patch -p0 < bash42-046
patch -p0 < bash42-047
patch -p0 < bash42-048
patch -p0 < bash42-049
patch -p0 < bash42-050

./configure --prefix=/
make
make test
make install