FEDORA-2016-f15168439d — security update for bash

stable

bash-4.3.42-5.fc23

FEDORA-2016-f15168439d created by svashisht 6 years ago for Fedora 23

Specially crafted SHELLOPTS and PS4 variables can cause arbitrary code execution. It is a security bug described in CVE-2016-7543 and this update fixes it.

Logout Required

After installing this update it is required that you logout of your current user session and log back in to ensure the changes supplied by this update are applied properly.

How to install

sudo dnf upgrade --refresh --advisory=FEDORA-2016-f15168439d

This update has been submitted for testing by svashisht.

6 years ago

This update has been pushed to testing.

6 years ago

em3rson commented & provided feedback 6 years ago

karma

works for me

grundblom commented & provided feedback 6 years ago

karma

Works for me

This update has been submitted for stable by bodhi.

6 years ago

jonathancalloway commented & provided feedback 6 years ago

karma

Seems to work after install and reboot

This update has been pushed to stable.

6 years ago

Please login to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

bash-4.3.42-5.fc23

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

6 years ago

in testing

6 years ago

in stable

6 years ago

BZ#1379634 CVE-2016-7543 bash: Specially crafted SHELLOPTS+PS4 variables allows command substitution [fedora-all]

bash-4.3.42-5.fc23

Automated Test Results

None