This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============5245529969921633866==
Content-Type: multipart/signed; micalg=pgp-sha512;
protocol="application/pgp-signature";
boundary="esIRXfAGPk6ST4Cwd2tYJVvD0XnqUQZip"
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--esIRXfAGPk6ST4Cwd2tYJVvD0XnqUQZip
Content-Type: multipart/mixed; boundary="HOZLkDvGL1nOJ9TKAdkhzeNRUfwwvDqZN";
protected-headers="v1"
From: Marc Deslauriers
Reply-To: Ubuntu Security
To: ubuntu-security-announce@lists.ubuntu.com
Message-ID: <159e013f-1386-5f3c-a51e-291671526f6d@canonical.com>
Subject: [USN-4058-1] Bash vulnerability
--HOZLkDvGL1nOJ9TKAdkhzeNRUfwwvDqZN
Content-Type: text/plain; charset=utf-8
Content-Language: en-C
Content-Transfer-Encoding: quoted-printable
==========================================================================
Ubuntu Security Notice USN-4058-1
July 15, 2019
bash vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 16.04 LTS
Summary:
A system hardening measure could be bypassed.
Software Description:
- bash: GNU Bourne Again SHell
Details:
It was discovered that Bash incorrectly handled the restricted shell. An
attacker could possibly use this issue to escape restrictions and execute
any command.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 16.04 LTS:
bash 4.3-14ubuntu1.4
In general, a standard system update will make all the necessary changes.
References:
https://usn.ubuntu.com/4058-1
CVE-2019-9924
Package Information:
https://launchpad.net/ubuntu/+source/bash/4.3-14ubuntu1.4
--HOZLkDvGL1nOJ9TKAdkhzeNRUfwwvDqZN--
--esIRXfAGPk6ST4Cwd2tYJVvD0XnqUQZip
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEUMSg3c8x5FLOsZtRZWnYVadEvpMFAl0spu8ACgkQZWnYVadE
vpO4Jw/+NO2eeNABnPyhXt9PbFFMCh81nQ0NwccKjUcHvJG5+DMZZZitmLoWfa4K
cd52g0nI4O3gqpNGzDo63rKT9hgkBv6K74EeRA00J3t/xNCMBTWBHySvHh/YVHqT
lGQMOcK4bYaUX1C8xVoiI4PqTEuVWkhMp+h0JTJSCC9K22rRm0iIm3/OaW9vv49w
Gm1RxiH/9wr3mFOcWwyzZ2D2wWgE05zTsBXlgqO3jMYHop/Smw7/4zpRIEg9BNZA
G+8Cry4l2fIbYaX2rkDuRcWYwxpZ68r2aSGIpKCPNFpiW4bFUZshMRZUh3pEToOo
SX2/l1neg39hlfCUQ0XnpRQU2gjU8aFQrpWfBkfcSlNHWcP/TiAkhQIilfIKNFrV
kfsjdLzDbha377GEgvzsflj9JEn2AQF0EnjAfXVHcEYOV17AiTz0TzZGEMVDktda
cHoq3msjVr//MAvc8tGjA1cvPYY28o/S8uNRoqi0zEA633tKFP1i7R+ZIQbszImz
BXcwXJfEtUw/AE6RoDorh/Xj1xzRrA0MIrpUP7k46A/Ifeyqll3d47QXW/2zrv1F
3Qpmk2n0ThfawBJ/4gg9Qf5WDa6fEqK6EifQHPbWf2NVn9NnWDrIQA9T0bj+UG+E
oREHGxVHhMtbWMTeUZrsfl6tovts7mRoXMEPhUcSVnuqfVMEhNk=
=fFXA
-----END PGP SIGNATURE-----
--esIRXfAGPk6ST4Cwd2tYJVvD0XnqUQZip--
--===============5245529969921633866==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline
LS0gCnVidW50dS1zZWN1cml0eS1hbm5vdW5jZSBtYWlsaW5nIGxpc3QKdWJ1bnR1LXNlY3VyaXR5
LWFubm91bmNlQGxpc3RzLnVidW50dS5jb20KTW9kaWZ5IHNldHRpbmdzIG9yIHVuc3Vic2NyaWJl
IGF0OiBodHRwczovL2xpc3RzLnVidW50dS5jb20vbWFpbG1hbi9saXN0aW5mby91YnVudHUtc2Vj
dXJpdHktYW5ub3VuY2UK
--===============5245529969921633866==--
|