我在哪里可以下载一套完整的bash源代码来解决“shellshock”漏洞

在下载bash-4.3并应用修补程序1到25（来自http://ftp.gnu.org/gnu/bash ）之后，编译后的bash版本仍然存在两个潜在的漏洞（如以下文章中所述： https：/ /access.redhat.com/articles/1200223 ）

我的问题是：有没有人知道我可以从哪里下载剩余的补丁或从信誉良好的网站下载完整的源代码？

以下是链接文章的相关代码片段：

The versions with only the original CVE-2014-6271 fix applied produce the following output: $ env 'x=() { :;}; echo vulnerable' 'BASH_FUNC_x()=() { :;}; echo vulnerable' bash -c "echo test" bash: warning: x: ignoring function definition attempt bash: error importing function definition for `x' bash: error importing function definition for `BASH_FUNC_x()' test 

 The fix for CVE-2014-7169 ensures that the system is protected from the file creation issue. To test if your version of Bash is vulnerable to CVE-2014-7169, run the following command: $ cd /tmp; rm -f /tmp/echo; env 'x=() { (a)=>\' bash -c "echo date"; cat /tmp/echo bash: x: line 1: syntax error near unexpected token `=' bash: x: line 1: `' bash: error importing function definition for `x' Fri Sep 26 11:49:58 GMT 2014 If your system is vulnerable, the time and date information will be output on the screen and a file called /tmp/echo will be created. If your system is not vulnerable, you will see output similar to: $ cd /tmp; rm -f /tmp/echo; env 'x=() { (a)=>\' bash -c "echo date"; cat /tmp/echo date cat: /tmp/echo: No such file or directory 

• bashvariables：扩展名称与模式匹配的variables的值
• 我怎样才能从文件中获取内容的双引号
• Bash – 我怎么能通过variables来命令和读取它的输出
• 需要通过本地bash脚本执行和删除远程bash脚本的帮助
• 在linux中获取文件上次修改时间的状态