A vulnerability in Bash may allow users to escalate privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-shells/bash | * | < 5.0_p11-r1 | >= 5.0_p11-r1 |
Bash is the standard GNU Bourne Again SHell.
It was discovered that Bash incorrectly dropped privileges by setting its effective UID to its real UID.
A local attacker could possibly escalate privileges.
There is no known workaround at this time.
All Bash users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-shells/bash-5.0_p11-r1"
Multiple vulnerabilities were found in Bash, the worst of which may allow execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-shells/bash | * | < 4.3_p48-r1 | >= 4.3_p48-r1 |
Bash is the standard GNU Bourne Again SHell.
Multiple vulnerabilities have been discovered in Bash. Please review the CVE identifiers referenced below for details.
A local attacker could possibly execute arbitrary code with the privileges of the process, or cause a Denial of Service condition.
There is no known workaround at this time.
All Bash users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-shells/bash-4.3_p48-r1"
A vulnerability in Bash could potentially lead to arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-shells/bash | * | < 4.3_p46-r1 | >= 4.3_p46-r1 |
Bash is the standard GNU Bourne Again SHell.
A vulnerability was found in the way Bash expands $HOSTNAME. Injecting malicious code into $HOSTNAME could cause it to run each time Bash expands \h in the prompt string.
A remote attacker controlling the system’s hostname (i.e. via DHCP) could possibly execute arbitrary code with the privileges of the process, or cause a Denial of Service condition.
There is no known workaround at this time.
All Bash users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-shells/bash-4.3_p46-r1"
Multiple parsing flaws in Bash could allow remote attackers to inject code or cause a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-shells/bash | * | < 4.2_p52 | >= 3.1_p22 (revision), >= 3.2_p56 (revision), >= 4.0_p43 (revision), >= 4.1_p16 (revision), >= 4.2_p52 |
Bash is the standard GNU Bourne Again SHell.
Florian Weimer, Todd Sabin, Michal Zalewski et al. discovered further parsing flaws in Bash. The unaffected Gentoo packages listed in this GLSA contain the official patches to fix the issues tracked as CVE-2014-6277, CVE-2014-7186, and CVE-2014-7187. Furthermore, the official patch known as “function prefix patch” is included which prevents the exploitation of CVE-2014-6278.
A remote attacker could exploit these vulnerabilities to execute arbitrary commands or cause a Denial of Service condition via various vectors.
There is no known workaround at this time.
All Bash 3.1 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-shells/bash-3.1_p22:3.1"
All Bash 3.2 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-shells/bash-3.2_p56:3.2"
All Bash 4.0 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-shells/bash-4.0_p43:4.0"
All Bash 4.1 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-shells/bash-4.1_p16:4.1"
All Bash 4.2 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-shells/bash-4.2_p52"
A parsing flaw related to functions and environments in Bash could allow attackers to inject code. The unaffected packages listed in GLSA 201409-09 had an incomplete fix.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-shells/bash | * | < 4.2_p48-r1 | >= 3.1_p18-r1 (revision), >= 3.2_p52-r1 (revision), >= 4.0_p39-r1 (revision), >= 4.1_p12-r1 (revision), >= 4.2_p48-r1 |
Bash is the standard GNU Bourne Again SHell.
Stephane Chazelas reported that Bash incorrectly handles function definitions, allowing attackers to inject arbitrary code (CVE-2014-6271). Gentoo Linux informed about this issue in GLSA 201409-09.
Tavis Ormandy reported that the patch for CVE-2014-6271 was incomplete. As such, this GLSA supersedes GLSA 201409-09.
A remote attacker could exploit this vulnerability to execute arbitrary commands even in restricted environments.
There is no known workaround at this time.
All Bash 3.1 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-shells/bash-3.1_p18-r1:3.1"
All Bash 3.2 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-shells/bash-3.2_p52-r1:3.2"
All Bash 4.0 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-shells/bash-4.0_p39-r1:4.0"
All Bash 4.1 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-shells/bash-4.1_p12-r1:4.1"
All Bash 4.2 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-shells/bash-4.2_p48-r1"
A parsing flaw related to functions and environments in Bash could allow attackers to inject code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-shells/bash | * | < 4.2_p48 | >= 3.1_p18 (revision), >= 3.2_p52 (revision), >= 4.0_p39 (revision), >= 4.1_p12 (revision), >= 4.2_p48 |
Bash is the standard GNU Bourne Again SHell.
Stephane Chazelas reported that Bash incorrectly handles function definitions, allowing attackers to inject arbitrary code.
A remote attacker could exploit this vulnerability to execute arbitrary commands even in restricted environments.
There is no known workaround at this time.
All Bash 3.1 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-shells/bash-3.1_p18:3.1"
All Bash 3.2 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-shells/bash-3.2_p52:3.2"
All Bash 4.0 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-shells/bash-4.0_p39:4.0"
All Bash 4.1 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-shells/bash-4.1_p12:4.1"
All Bash 4.2 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-shells/bash-4.2_p48"
Two vulnerabilities have been found in Bash, the worst of which may allow execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-shells/bash | * | < 4.2_p37 | >= 4.2_p37 |
Bash is the standard GNU Bourne Again SHell.
Two vulnerabilities have been found in Bash:
A remote attacker could entice a user to open a specially crafted Bash script, possibly resulting in execution of arbitrary code with the privileges of the process, or a Denial of Service condition of the Bash executable.
A local attacker may be able to perform symlink attacks to overwrite arbitrary files with the privileges of the user running the application or bypass shell access restrictions.
There is no known workaround at this time.
All Bash users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-shells/bash-4.2_p37"