7 ms·
RHEL made a C shared object available that you can preload in everything which cleans up the environment of the magic "() {" bit : https://access.redhat.com/art
by Erwin 12y ago
RHEL made a C shared object available that you can preload in everything which cleans up the environment of the magic "() {" bit : https://access.redhat.com/articles/1200223 https://access.redhat.com/articles/1200223 (and apparently exactly that sequence has magic meaning; "( ) {" does not work )
For CGI scripts, only putting it in /etc/ld.so.preload worked for me. It seems like the CGI environment has LD_PRELOAD stripped (I checked /proc/apache_pid/environ which has LD_PRELOAD, but the CGI script running does not).
- minhajuddin 12y agoIs this an alternative to the bash upgrade or is this needed to fix the issue after the bash upgrade (because of an incomplete patch)?
- m4r71n 12y agoIt's a workaround that should be used if you must mitigate the issue right at this moment. Applying the update, once it's available, should do the same thing. Note that the workaround might have some unintended consequences as mentioned in the FAQ section of [1]. [1] https://access.redhat.com/articles/1200223 https://access.redhat.com/articles/1200223
- deleted 12y ago[deleted]