USN-2362-1: Bash vulnerability

Releases

• Ubuntu 14.04 ESM
• Ubuntu 12.04
• Ubuntu 10.04

Packages

• bash - GNU Bourne Again SHell

Details

Stephane Chazelas discovered that Bash incorrectly handled trailing code in
function definitions. An attacker could use this issue to bypass
environment restrictions, such as SSH forced command environments.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 14.04

• bash - 4.3-7ubuntu1.1

Ubuntu 12.04

• bash - 4.2-2ubuntu2.2

Ubuntu 10.04

• bash - 4.1-2ubuntu3.1

In general, a standard system update will make all the necessary changes.

References

• CVE-2014-6271