FEDORA-2016-2c4b5ad64e — security update for bash

stable

bash-4.3.43-4.fc25

FEDORA-2016-2c4b5ad64e created by svashisht 6 years ago for Fedora 25

Specially crafted SHELLOPTS and PS4 variables can cause arbitrary code execution. It is a security bug described in CVE-2016-7543 and this update fixes it.

Logout Required

After installing this update it is required that you logout of your current user session and log back in to ensure the changes supplied by this update are applied properly.

How to install

sudo dnf upgrade --refresh --advisory=FEDORA-2016-2c4b5ad64e

This update has been submitted for testing by svashisht.

6 years ago

This update has been pushed to testing.

6 years ago

viorel commented & provided feedback 6 years ago

karma

LGTM

BZ#1379634 CVE-2016-7543 bash: Specially crafted SHELLOPTS+PS4 variables allows command substitution [fedora-all]

grundblom commented & provided feedback 6 years ago

karma

Works for me

This update has been submitted for stable by bodhi.

6 years ago

besser82 commented & provided feedback 6 years ago

karma

Works fine! LGTM! =)

This update has been pushed to stable.

6 years ago

Please login to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

bash-4.3.43-4.fc25

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

6 years ago

in testing

6 years ago

in stable

6 years ago

BZ#1379634 CVE-2016-7543 bash: Specially crafted SHELLOPTS+PS4 variables allows command substitution [fedora-all]

bash-4.3.43-4.fc25

Automated Test Results

None