env t='() { :;}; echo You are vulnerable.' bash -c "true"

 
在终端命令行中运行以上代码，如果提示“You are vulnerable”，请马上打上被丁.

Ubuntu or Debian 请执行

apt-get update -y
apt-get upgrade -y

RedHat, CentOS or Fedora 请执行

yum clean all
yum -y update bash
yum update -y

编译升级bash

wget https://ftp.gnu.org/gnu/bash/bash-4.3.tar.gz
tar zxf bash-4.3.tar.gz ; cd bash-4.3
wget -r -nd -np https://ftp.gnu.org/gnu/bash/bash-4.3-patches/
for BP in `ls bash43-*|grep -v sig`; do patch -p0 < $BP; done
./configure
make && make install

为了及时升级系统补丁，所以我们可以写一个升级脚本放在crond定时任务里边.
https://www.myzhenai.com.cn/post/1628.html https://www.myzhenai.com/thread-16044-1-1.html

Linux下Bash严重漏洞补丁升级方法