The bash shell in my production box is vulnerable to 'bashbug' vulnerability. https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/
The version installed is
`$ bash --version GNU bash, version 4.1.2(1)-release (x86_64-redhat-linux-gnu)`
I am not able to use
YUM to install the latest package because our server is not connected to Internet , SO I am trying to install
bash using source code. I downloaded
bash 4.3 and installed it from source code.Since this version is still vulnerable to bash bug , I need to apply the latest patch for this version.
For this I downloaded the latest patch for
bash from the following site.
I am applying
bash43-030 patch from the above link.
Issue I am facing is that apply of patch is failing with the following error
[bash-4.3]$ patch -p0 < bash-patch
patching file builtins/evalstring.c
Hunk #1 FAILED at 309.
Hunk #2 FAILED at 379.
2 out of 2 hunks FAILED -- saving rejects to file builtins/evalstring.c.rej
patching file parse.y
Hunk #1 succeeded at 2574 (offset 35 lines).
Hunk #2 FAILED at 4038.
1 out of 2 hunks FAILED -- saving rejects to file parse.y.rej
patching file shell.h
Hunk #1 succeeded at 181 with fuzz 2.
patching file y.tab.c
Hunk #1 FAILED at 169.
Hunk #2 FAILED at 498.
Hunk #3 FAILED at 2099.
Hunk #4 FAILED at 2113.
Hunk #98 FAILED at 6350.
97 out of 98 hunks FAILED -- saving rejects to file y.tab.c.rej
patching file patchlevel.h
Hunk #1 FAILED at 26.
1 out of 1 hunk FAILED -- saving rejects to file patchlevel.h.rej
Please suggest how to resolve the issue . May be approach of applying the patch is wrong .