Solaris 10 如何處理Bash遠(yuǎn)程任意代碼執(zhí)行安全漏洞？

anfy

哪位大俠知道Solaris 10如何處理Bash遠(yuǎn)程任意代碼執(zhí)行安全漏洞呢？

我用pkgutil更新的bash，新的bash安裝路徑是/opt/csw/bin/bash。

安裝過程及結(jié)果如下：
# /opt/csw/bin/pkgutil -y -i bash
=> Fetching new catalog and descriptions (http://mirror.opencsw.org/opencsw/testing/i386/5.10) if available ...
==> 3746 packages loaded from /var/opt/csw/pkgutil/catalog.mirror.opencsw.org_opencsw_testing_i386_5.10
Solving needed dependencies ...
Solving dependency order ...
7 CURRENT packages:
        CSWcas-texinfo-1.42,REV=2010.11.26
        CSWcommon-1.5,REV=2010.12.11
        CSWggettext-data-0.18.1.1,p,REV=2011.03.15
        CSWiconv-1.14,REV=2011.08.08
        CSWlibcharset1-1.14,REV=2011.08.07
        CSWlibiconv2-1.14,REV=2011.08.07
        CSWlibintl8-0.18.1.1,p,REV=2011.03.15
Install 2 NEW packages:
        CSWbash-4.3.25,REV=2014.09.26 (opencsw/testing)
        CSWcas-etcshells-1.45,REV=2011.07.12 (opencsw/testing)
Total size: 2.1 MB
=> Fetching CSWcas-etcshells-1.45,REV=2011.07.12 (1/2) ...
=> Fetching CSWbash-4.3.25,REV=2014.09.26 (2/2) ...

=> Installing CSWcas-etcshells-1.45,REV=2011.07.12 (1/2) ...
Please see /opt/csw/share/doc/cas_etcshells/license for license information.

Installation of <CSWcas-etcshells> was successful.

=> Installing CSWbash-4.3.25,REV=2014.09.26 (2/2) ...
Please see /opt/csw/share/doc/bash/license for license information.
Installing class <cswetcshells> ...
Creating /etc/shells with default set of shells (see: man shells)
Registering /opt/csw/bin/bash in /etc/shells.
Installing class <cswtexinfo> ...
/opt/csw/share/info/bash.info (texinfo will be registered when CSWtexinfo is installed)

Installation of <CSWbash> was successful.


查看默認(rèn)的bash版本：
# bash -version
GNU bash, version 3.00.16(1)-release (i386-pc-solaris2.10)
Copyright (C) 2004 Free Software Foundation, Inc.

查看新更新的bash的版本號(hào)，出現(xiàn)錯(cuò)誤了：
# /opt/csw/bin/bash -version
ld.so.1: bash: 致命的: libc.so.1: 版本`SUNW_1.22.5'未找到(文件 /opt/csw/bin/bash必需的)
ld.so.1: bash: 致命的: libc.so.1: 打開失敗: 無此文件或目錄
被殺掉

大俠，受累告訴我如何處理這個(gè)棘手問題，謝謝指導(dǎo)！

watchsat

You need this:

SunOS 5.10_x86: bash patch (Patch) 126547-07.zip        2.4 MB

zhmg

請(qǐng)問樓上大俠能提供下載地址嗎？我的是5.10 sparc平臺(tái)的，謝謝！

zgq919

給個(gè)下載地址，sparc 64bit  多謝！回復(fù) 2# watchsat


   

anfy

回復(fù) 1# anfy

一個(gè)大神的解決方法：
#  LD_NOVERSION=yes
# export LD_NOVERSION


設(shè)置環(huán)境變量就可以了！

anfy

回復(fù) 3# zhmg


    看看這個(gè)帖子，有幫助：
   http://blog.chinaunix.net/uid-113269-id-4533739.html

anfy

回復(fù) 4# zgq919


    看看這個(gè)帖子，不知道對(duì)你的問題有幫助沒有：
   http://blog.chinaunix.net/uid-113269-id-4533739.html

zhmg

我全部裝完之后，運(yùn)行報(bào)錯(cuò)，請(qǐng)各位大俠幫忙看看，非常感謝！
jinjq# ls -ltr
total 28418
-rw-r-----   1 jinjq other     574464 Dec 26 13:03 now
-rw-r-----   1 jinjq other     955392 Dec 26 13:10 bash_completion-2.1,REV=2014.04.21-SunOS5.10-all-CSW.pkg
-rw-r-----   1 jinjq other    7661056 Dec 26 13:10 bash-4.3.30,REV=2014.10.18-SunOS5.10-i386-CSW.pkg
-rw-r-----   1 jinjq other       7680 Dec 26 13:20 cas_etcshells-1.45,REV=2011.07.12-SunOS5.9-all-CSW.pkg
-rw-r-----   1 jinjq other       7168 Dec 26 13:21 cas_texinfo-1.42,REV=2010.11.26-SunOS5.9-all-CSW.pkg
-rw-r-----   1 jinjq other      22528 Dec 26 13:21 common-1.5,REV=2010.12.11-SunOS5.8-i386-CSW.pkg
-rw-r-----   1 jinjq other    2862592 Dec 26 13:22 ggettext_data-0.18.1.1,p,REV=2011.03.15-SunOS5.9-all-CSW.pkg
-rw-r-----   1 jinjq other      40960 Dec 26 13:22 iconv_stub-1.14,REV=2011.08.08-SunOS5.9-all-CSW.pkg
-rw-r-----   1 jinjq other      69632 Dec 26 13:22 libcharset1-1.14,REV=2011.08.07-SunOS5.9-i386-CSW.pkg
-rw-r-----   1 jinjq other    1979392 Dec 26 13:23 libiconv2-1.14,REV=2011.08.07-SunOS5.9-i386-CSW.pkg
-rw-r-----   1 jinjq other     289280 Dec 26 13:23 libintl8-0.18.1.1,p,REV=2011.03.15-SunOS5.9-i386-CSW.pkg
jxdns02ber# pkgadd -d bash-4.3.30,REV=2014.10.18-SunOS5.10-i386-CSW.pkg

The following packages are available:
  1  CSWbash     bash - A sh-compatible command language interpreter
                 (i386) 4.3.30,REV=2014.10.18

Select package(s) you wish to process (or 'all' to process
all packages). (default: all) [?,??,q]: all

Processing package instance <CSWbash> from </export/home/jinjq/jinjq/bash/bash-4.3.30,REV=2014.10.18-SunOS5.10-i386-CSW.pkg>

bash - A sh-compatible command language interpreter(i386) 4.3.30,REV=2014.10.18

This appears to be an attempt to install the same architecture and
version of a package which is already installed.  This installation
will attempt to overwrite this package.

Please see /opt/csw/share/doc/bash/license for license information.
Using </> as the package base directory.
## Processing package information.
## Processing system information.
   63 package pathnames are already properly installed.
## Verifying package dependencies.
## Verifying disk space requirements.
## Checking for conflicts with packages already installed.
## Checking for setuid/setgid programs.

Installing bash - A sh-compatible command language interpreter as <CSWbash>

## Installing part 1 of 1.
[ verifying class <none> ]
Installing class <cswetcshells> ...
[ verifying class <cswetcshells> ]
Installing class <cswtexinfo> ...
[ verifying class <cswtexinfo> ]

Installation of <CSWbash> was successful.
jinjq# /opt/csw/bin/bash -version
/opt/csw/bin/bash: Invalid argument

cn_lay

有沒有補(bǔ)丁的下載鏈接 求

ahcnpl

下補(bǔ)丁是要有MOS賬號(hào)的.