Errata ID | 213 |
---|---|
Date | 2014-09-25 |
Source package | bash |
Fixed in version | 4.1-3.33.201409251312 |
Description | Stephane Chazelas discovered a vulnerability in bash, the GNU Bourne-Again Shell, related to how environment variables are processed. In many common configurations, this vulnerability is exploitable over the network, especially if bash has been configured as the system shell. |
Additional notes | |
CVE ID | CVE-2014-6271 CVE-2014-7169 |
UCS Bug number | #35992 |