Login
Newsletter
Werbung

Sicherheit: Ausführen beliebiger Kommandos in Bash
Aktuelle Meldungen Distributionen
Name: Ausführen beliebiger Kommandos in Bash
ID: USN-4058-1
Distribution: Ubuntu
Plattformen: Ubuntu 16.04 LTS
Datum: Mo, 15. Juli 2019, 20:27
Referenzen: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9924
Applikationen: GNU Bash

Originalnachricht

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============5245529969921633866==
Content-Type: multipart/signed; micalg=pgp-sha512;
protocol="application/pgp-signature";
boundary="esIRXfAGPk6ST4Cwd2tYJVvD0XnqUQZip"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--esIRXfAGPk6ST4Cwd2tYJVvD0XnqUQZip
Content-Type: multipart/mixed;
boundary="HOZLkDvGL1nOJ9TKAdkhzeNRUfwwvDqZN";
protected-headers="v1"
From: Marc Deslauriers <marc.deslauriers@canonical.com>
Reply-To: Ubuntu Security <security@ubuntu.com>
To: ubuntu-security-announce@lists.ubuntu.com
Message-ID: <159e013f-1386-5f3c-a51e-291671526f6d@canonical.com>
Subject: [USN-4058-1] Bash vulnerability

--HOZLkDvGL1nOJ9TKAdkhzeNRUfwwvDqZN
Content-Type: text/plain; charset=utf-8
Content-Language: en-C
Content-Transfer-Encoding: quoted-printable

==========================================================================
Ubuntu Security Notice USN-4058-1
July 15, 2019

bash vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 16.04 LTS

Summary:

A system hardening measure could be bypassed.

Software Description:
- bash: GNU Bourne Again SHell

Details:

It was discovered that Bash incorrectly handled the restricted shell. An
attacker could possibly use this issue to escape restrictions and execute
any command.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
bash 4.3-14ubuntu1.4

In general, a standard system update will make all the necessary changes.

References:
https://usn.ubuntu.com/4058-1
CVE-2019-9924

Package Information:
https://launchpad.net/ubuntu/+source/bash/4.3-14ubuntu1.4


--HOZLkDvGL1nOJ9TKAdkhzeNRUfwwvDqZN--

--esIRXfAGPk6ST4Cwd2tYJVvD0XnqUQZip
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=fFXA
-----END PGP SIGNATURE-----

--esIRXfAGPk6ST4Cwd2tYJVvD0XnqUQZip--


--===============5245529969921633866==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

LS0gCnVidW50dS1zZWN1cml0eS1hbm5vdW5jZSBtYWlsaW5nIGxpc3QKdWJ1bnR1LXNlY3VyaXR5
LWFubm91bmNlQGxpc3RzLnVidW50dS5jb20KTW9kaWZ5IHNldHRpbmdzIG9yIHVuc3Vic2NyaWJl
IGF0OiBodHRwczovL2xpc3RzLnVidW50dS5jb20vbWFpbG1hbi9saXN0aW5mby91YnVudHUtc2Vj
dXJpdHktYW5ub3VuY2UK

--===============5245529969921633866==--
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung