FEDORA-2016-5a54fb4784 — security update for bash

stable

bash-4.3.42-7.fc24

FEDORA-2016-5a54fb4784 created by svashisht 8 years ago for Fedora 24

Specially crafted SHELLOPTS and PS4 variables can cause arbitrary code execution. It is a security bug described in CVE-2016-7543 and this update fixes it.

Logout Required

After installing this update it is required that you logout of your current user session and log back in to ensure the changes supplied by this update are applied properly.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2016-5a54fb4784

This update has been submitted for testing by svashisht.

8 years ago

hreindl commented & provided feedback 8 years ago

karma

works for me

samoht0 commented & provided feedback 8 years ago

karma

Looks good.

dhgutteridge commented & provided feedback 8 years ago

karma

No regressions noted.

This update has been pushed to testing.

8 years ago

This update has been submitted for stable by bodhi.

8 years ago

This update has been pushed to stable.

8 years ago

Please login to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

8 years ago

in testing

8 years ago

in stable

8 years ago

Builds

bash-4.3.42-7.fc24

BZ#1379634 CVE-2016-7543 bash: Specially crafted SHELLOPTS+PS4 variables allows command substitution [fedora-all]

bash-4.3.42-7.fc24

Automated Test Results

None