Re: Bash updating for preventing from shellshock

[Greg Wooledge]

On Tue, Dec 02, 2014 at 03:09:23PM +0545, bijay pant wrote:
> Bash Version: 4.1
> Patch Level: 2
> Release Status: release

4.1.2 is vulnerable to shellshock.  If you're going to compile from
source, you should compile a newer version with all the patches applied.

Patches for bash-4.1 are found in http://ftp.gnu.org/gnu/bash/bash-4.1-patches/

If you're willing to upgrade to the latest version of bash (4.3.30)
you can find a tarball with all the patches applied at
http://git.savannah.gnu.org/cgit/bash.git/snapshot/bash-master.tar.gz

Or you can apply the patches to bash-4.3.tar.gz, if you prefer.