Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 591
Alerts This Week
Warning Icon 1 591

Ubuntu 20.04 LTS USN-5380-1 Critical: Bash Escalation Risk

ubuntu
Calendar Grey April 20, 2022
Dist Ubuntu Esm H88
The Ubuntu Security Notice USN-5500-1 addresses a critical vulnerability in Python that could lead to remote code execution across various versions.
Bash could be used to escalate privileges.

Summary

Bash could be used to escalate privileges.

Software Description:

- bash: GNU Bourne Again SHell

Details:

It was discovered that Bash did not properly drop privileges

when the binary had the setuid bit enabled. An attacker could

possibly use this issue to escalate privileges.

Topics%20covered

Topics Covered

security advisory critical software update privilege escalation ubuntu bash

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS:
   bash                            5.0-6ubuntu1.2

Ubuntu 18.04 LTS:
   bash                            4.4.18-2ubuntu1.3

Ubuntu 16.04 ESM:
   bash                            4.3-14ubuntu1.4+esm1

Ubuntu 14.04 ESM:
   bash                            4.3-7ubuntu1.8+esm2

In general, a standard system update will make all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-5380-1

  CVE-2019-18276

Severity
critical
Lowest
Low
Medium
High
Critical

April 20, 2022

Topics%20covered

Topics Covered

security advisory critical software update privilege escalation ubuntu bash

Package Information

  https://launchpad.net/ubuntu/+source/bash/5.0-6ubuntu1.2
  https://launchpad.net/ubuntu/+source/bash/4.4.18-2ubuntu1.3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.