You are here
Home > Preporuke > Sigurnosni nedostatak programskog paketa bash

Sigurnosni nedostatak programskog paketa bash

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LUB

==========================================================================
Ubuntu Security Notice USN-4058-1
July 15, 2019

bash vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 16.04 LTS

Summary:

A system hardening measure could be bypassed.

Software Description:
– bash: GNU Bourne Again SHell

Details:

It was discovered that Bash incorrectly handled the restricted shell. An
attacker could possibly use this issue to escape restrictions and execute
any command.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
bash 4.3-14ubuntu1.4

In general, a standard system update will make all the necessary changes.

References:
https://usn.ubuntu.com/4058-1
CVE-2019-9924

Package Information:
https://launchpad.net/ubuntu/+source/bash/4.3-14ubuntu1.4

—–BEGIN PGP SIGNATURE—–

iQIzBAEBCgAdFiEEUMSg3c8x5FLOsZtRZWnYVadEvpMFAl0spu8ACgkQZWnYVadE
vpO4Jw/+NO2eeNABnPyhXt9PbFFMCh81nQ0NwccKjUcHvJG5+DMZZZitmLoWfa4K
cd52g0nI4O3gqpNGzDo63rKT9hgkBv6K74EeRA00J3t/xNCMBTWBHySvHh/YVHqT
lGQMOcK4bYaUX1C8xVoiI4PqTEuVWkhMp+h0JTJSCC9K22rRm0iIm3/OaW9vv49w
Gm1RxiH/9wr3mFOcWwyzZ2D2wWgE05zTsBXlgqO3jMYHop/Smw7/4zpRIEg9BNZA
G+8Cry4l2fIbYaX2rkDuRcWYwxpZ68r2aSGIpKCPNFpiW4bFUZshMRZUh3pEToOo
SX2/l1neg39hlfCUQ0XnpRQU2gjU8aFQrpWfBkfcSlNHWcP/TiAkhQIilfIKNFrV
kfsjdLzDbha377GEgvzsflj9JEn2AQF0EnjAfXVHcEYOV17AiTz0TzZGEMVDktda
cHoq3msjVr//MAvc8tGjA1cvPYY28o/S8uNRoqi0zEA633tKFP1i7R+ZIQbszImz
BXcwXJfEtUw/AE6RoDorh/Xj1xzRrA0MIrpUP7k46A/Ifeyqll3d47QXW/2zrv1F
3Qpmk2n0ThfawBJ/4gg9Qf5WDa6fEqK6EifQHPbWf2NVn9NnWDrIQA9T0bj+UG+E
oREHGxVHhMtbWMTeUZrsfl6tovts7mRoXMEPhUcSVnuqfVMEhNk=
=fFXA
—–END PGP SIGNATURE—–

AutorJosip Papratovic
Cert idNCERT-REF-2019-07-0001-ADV
CveCERT-CVE-DUMMY
ID izvornikaCERT-ORIGID-DUMMY
ProizvodCERT-DUMMY-PRODUCT
IzvorAdobe
Top
More in Preporuke
Sigurnosni nedostaci programskih paketa squid i squid3

Otkriveni su sigurnosni nedostaci u programskim paketima squid i squid3 za operacijski sustav Ubuntu. Otkriveni nedostaci potencijalnim napadačima omogućuju izazivanje...

Close