Linux Shellshock Security Patch

Just doing a routine browsing this morning and I found that my Ubuntu is vulnerable to Shellshock attack. Shellshock is a newly discovered security vulnerability for your bash, which means all Linux and Mac systems are vulnerable from this security issue. Shellshock uses crafted environment variables in bash scripts to gain access to your computer. This is more serious than Heartbleed a while ago.

To test if your Linux is vulnerable, run this script on your bash terminal:

env x='() { :;}; echo vulnerable' bash -c "echo patch now!"

If you see a message: vulnerable patch now!, then stop everything you are doing now and apply these patches:

For Ubuntu / Debian:

sudo apt-get update && sudo apt-get install --only-upgrade bash

For CentOS:

yum -y update bash

This is a very serious security issue, so make sure you update all your servers to prevent this vulnerability.

Stay safe!

Script source: http://www.linuxnews.pro/patch-bash-shell-shock-centos-ubuntu/