Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 598
Alerts This Week
Warning Icon 1 598

Ubuntu 14.04 LTS USN-2363-1: Bash Environment Bypass Threat

ubuntu
Calendar Grey September 25, 2014
Scroller Ubuntu
Alert regarding security vulnerability in Ubuntu Bash impacting versions 10.04, 12.04, and 14.04. Users are urged to implement protective measures and install available patches.
Bash allowed bypassing environment restrictions in certain environments.

Summary

Bash allowed bypassing environment restrictions in certain environments.

Software Description:

- bash: GNU Bourne Again SHell

Details:

Tavis Ormandy discovered that the security fix for Bash included in

USN-2362-1 was incomplete. An attacker could use this issue to bypass

certain environment restrictions. (CVE-2014-7169)

Topics%20covered

Topics Covered

security advisory threat update instructions ubuntu bash environment bypass

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 LTS:
  bash                            4.3-7ubuntu1.2

Ubuntu 12.04 LTS:
  bash                            4.2-2ubuntu2.3

Ubuntu 10.04 LTS:
  bash                            4.1-2ubuntu3.2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2363-1

CVE-2014-7169

Severity
critical
Lowest
Low
Medium
High
Critical

September 25, 2014

Topics%20covered

Topics Covered

security advisory threat update instructions ubuntu bash environment bypass

Package Information

https://launchpad.net/ubuntu/+source/bash/4.3-7ubuntu1.2
https://launchpad.net/ubuntu/+source/bash/4.2-2ubuntu2.3
https://launchpad.net/ubuntu/+source/bash/4.1-2ubuntu3.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.