drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Ausführen beliebiger Kommandos in Bash
Name: |
Ausführen beliebiger Kommandos in Bash |
|
ID: |
USN-4058-1 |
|
Distribution: |
Ubuntu |
|
Plattformen: |
Ubuntu 16.04 LTS |
|
Datum: |
Mo, 15. Juli 2019, 20:27 |
|
Referenzen: |
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9924 |
|
Applikationen: |
GNU Bash |
|
Originalnachricht |
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --===============5245529969921633866== Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="esIRXfAGPk6ST4Cwd2tYJVvD0XnqUQZip"
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --esIRXfAGPk6ST4Cwd2tYJVvD0XnqUQZip Content-Type: multipart/mixed; boundary="HOZLkDvGL1nOJ9TKAdkhzeNRUfwwvDqZN"; protected-headers="v1" From: Marc Deslauriers <marc.deslauriers@canonical.com> Reply-To: Ubuntu Security <security@ubuntu.com> To: ubuntu-security-announce@lists.ubuntu.com Message-ID: <159e013f-1386-5f3c-a51e-291671526f6d@canonical.com> Subject: [USN-4058-1] Bash vulnerability
--HOZLkDvGL1nOJ9TKAdkhzeNRUfwwvDqZN Content-Type: text/plain; charset=utf-8 Content-Language: en-C Content-Transfer-Encoding: quoted-printable
========================================================================== Ubuntu Security Notice USN-4058-1 July 15, 2019
bash vulnerability ==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 16.04 LTS
Summary:
A system hardening measure could be bypassed.
Software Description: - bash: GNU Bourne Again SHell
Details:
It was discovered that Bash incorrectly handled the restricted shell. An attacker could possibly use this issue to escape restrictions and execute any command.
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 16.04 LTS: bash 4.3-14ubuntu1.4
In general, a standard system update will make all the necessary changes.
References: https://usn.ubuntu.com/4058-1 CVE-2019-9924
Package Information: https://launchpad.net/ubuntu/+source/bash/4.3-14ubuntu1.4
--HOZLkDvGL1nOJ9TKAdkhzeNRUfwwvDqZN--
--esIRXfAGPk6ST4Cwd2tYJVvD0XnqUQZip Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEUMSg3c8x5FLOsZtRZWnYVadEvpMFAl0spu8ACgkQZWnYVadE vpO4Jw/+NO2eeNABnPyhXt9PbFFMCh81nQ0NwccKjUcHvJG5+DMZZZitmLoWfa4K cd52g0nI4O3gqpNGzDo63rKT9hgkBv6K74EeRA00J3t/xNCMBTWBHySvHh/YVHqT lGQMOcK4bYaUX1C8xVoiI4PqTEuVWkhMp+h0JTJSCC9K22rRm0iIm3/OaW9vv49w Gm1RxiH/9wr3mFOcWwyzZ2D2wWgE05zTsBXlgqO3jMYHop/Smw7/4zpRIEg9BNZA G+8Cry4l2fIbYaX2rkDuRcWYwxpZ68r2aSGIpKCPNFpiW4bFUZshMRZUh3pEToOo SX2/l1neg39hlfCUQ0XnpRQU2gjU8aFQrpWfBkfcSlNHWcP/TiAkhQIilfIKNFrV kfsjdLzDbha377GEgvzsflj9JEn2AQF0EnjAfXVHcEYOV17AiTz0TzZGEMVDktda cHoq3msjVr//MAvc8tGjA1cvPYY28o/S8uNRoqi0zEA633tKFP1i7R+ZIQbszImz BXcwXJfEtUw/AE6RoDorh/Xj1xzRrA0MIrpUP7k46A/Ifeyqll3d47QXW/2zrv1F 3Qpmk2n0ThfawBJ/4gg9Qf5WDa6fEqK6EifQHPbWf2NVn9NnWDrIQA9T0bj+UG+E oREHGxVHhMtbWMTeUZrsfl6tovts7mRoXMEPhUcSVnuqfVMEhNk= =fFXA -----END PGP SIGNATURE-----
--esIRXfAGPk6ST4Cwd2tYJVvD0XnqUQZip--
--===============5245529969921633866== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline
LS0gCnVidW50dS1zZWN1cml0eS1hbm5vdW5jZSBtYWlsaW5nIGxpc3QKdWJ1bnR1LXNlY3VyaXR5 LWFubm91bmNlQGxpc3RzLnVidW50dS5jb20KTW9kaWZ5IHNldHRpbmdzIG9yIHVuc3Vic2NyaWJl IGF0OiBodHRwczovL2xpc3RzLnVidW50dS5jb20vbWFpbG1hbi9saXN0aW5mby91YnVudHUtc2Vj dXJpdHktYW5ub3VuY2UK
--===============5245529969921633866==--
|
|
|
|