Shellshock Bash Fix Update - Red Hat Enterprise 6.0 (x86_64)
| 1 Votes |
Description
Bash Code Injection Vulnerability via Specially Crafted Environment Variables (CVE-2014-6271, CVE-2014-7169)
Update: 2014-09-25 03:10 UTC
Red Hat has become aware that the patch for CVE-2014-6271 is incomplete. An attacker can provide specially-crafted environment variables containing arbitrary commands that will be executed on vulnerable systems under certain conditions. The new issue has been assigned CVE-2014-7169. See also Resolution for Bash Code Injection Vulnerability via Specially Crafted Environment Variables (CVE-2014-6271) in Red Hat Enterprise Linux. Red Hat is working on patches in conjunction with the upstream developers as a critical priority. For details on a workaround, please see the FAQ below.
Red Hat advises customers to upgrade to the version of Bash which contains the fix for CVE-2014-6271, and not wait for the patch which fixes CVE-2014-7169. CVE-2014-7169 is a less severe issue and patches for it are being worked on.
Property Details
| 3861 | |
| QA - Ready for Production Level Testing | |
| Shellshock Bash Fix Update - Red Hat Enterprise 6.0 (x86_64) | |
| BESC | |
| Bug Fix Advisory | |
| 9/25/2014 12:00:00 AM | |
| Shellshock Bash | |
| sinucus on 9/25/2014 1:56:25 PM | |
| sinucus on 9/25/2014 1:56:25 PM | |
| 5133 Views / 10 Downloads | |
* Average over 0 ratings.
** Log In or Register to add your rating.
|
Relevance
| Used in 54 fixlets | * Results in a true/false |
| Used in 2 fixlets | * Results in a true/false |
| Used in 2 fixlets | * Results in a true/false |
| Used in 1 fixlet | * Results in a true/false |
Actions
Action 1 (default)
prefetch bash-4.1.2-15.el6_5.1.x86_64.rpm sha1:07396fdf7abd4d9a0b5ff0ae863d2d01d1dfa787 size:926472 http://EXAMPLEURL/bash-4.1.2-15.el6_5.1.x86_64.rpm
wait rpm -U __Download/bash-4.1.2-15.el6_5.1.x86_64.rpm
This action will be considered successful when the applicability relevance evaluates to false.
Sharing
| Social Media: |
Comments
 |
|
| I just quickly wrote this to patch my systems as I was tired of waiting for IBM. I do not promise that this will work on any systems other than mine. I ran this fixlet and then verified with "rpm -qa bash" that it was updated and then ran env x='() { :;}; echo vulnerable' bash -c "echo this is a test" after patching and it came back clean. | |
