--- title: 'USN-2363-1: Bash vulnerability | Ubuntu security notices' description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/notices/USN-2363-1 --- 1. [Ubuntu Security Notices](https://ubuntu.com/security/notices) 2. USN-2363-1 --- # USN-2363-1: Bash vulnerability Publication date 25 September 2014 Overview Bash allowed bypassing environment restrictions in certain environments. Releases [14.04 LTS](https://ubuntu.com/security/notices?release=trusty) [12.04](https://ubuntu.com/security/notices?release=precise) [10.04](https://ubuntu.com/security/notices?release=lucid) --- Open side navigation ## Packages * [bash](https://ubuntu.com/security/cves?package=bash) - GNU Bourne Again SHell ## Details Tavis Ormandy discovered that the security fix for Bash included in USN-2362-1 was incomplete. An attacker could use this issue to bypass certain environment restrictions. ([CVE-2014-7169](https://ubuntu.com/security/CVE-2014-7169)) ## Update instructions In general, a standard system update will make all the necessary changes. [Learn more about how to get the fixes.](https://ubuntu.com/security/cves/about#security) The problem can be corrected by updating your system to the following package versions: | Ubuntu Release | Package Version | | --- | --- | | 14.04 LTS trusty | [bash](https://launchpad.net/ubuntu/+source/bash) –  [4.3-7ubuntu1.2](https://launchpad.net/ubuntu/+source/bash/4.3-7ubuntu1.2) | | | | 12.04 precise | [bash](https://launchpad.net/ubuntu/+source/bash) –  [4.2-2ubuntu2.3](https://launchpad.net/ubuntu/+source/bash/4.2-2ubuntu2.3) | | | | 10.04 lucid | [bash](https://launchpad.net/ubuntu/+source/bash) –  [4.1-2ubuntu3.2](https://launchpad.net/ubuntu/+source/bash/4.1-2ubuntu3.2) | | | --- ### Reduce your security exposure Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines. [Get Ubuntu Pro](https://ubuntu.com/pro) ## References * [CVE-2014-7169](https://ubuntu.com/security/CVE-2014-7169) ## Related notices * [USN-2363-2](https://ubuntu.com/security/notices/USN-2363-2)