• [SECURITY] [DSA 3032-1] bash security update

    From Florian Weimer@1:229/2 to All on Wed Sep 24 16:10:02 2014
    From: [email protected]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-3032-1 [email protected] http://www.debian.org/security/ Florian Weimer September 24, 2014 http://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : bash
    CVE ID : CVE-2014-6271

    Stephane Chazelas discovered a vulnerability in bash, the GNU
    Bourne-Again Shell, related to how environment variables are
    processed. In many common configurations, this vulnerability is
    exploitable over the network, especially if bash has been configured
    as the system shell.

    For the stable distribution (wheezy), this problem has been fixed in
    version 4.2+dfsg-0.1+deb7u1.

    We recommend that you upgrade your bash packages.

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: [email protected]
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.4.10 (GNU/Linux)

    iQEcBAEBAgAGBQJUItYwAAoJEL97/wQC1SS+4FgH/Rc0vzO0cWMyTvvUjlgPsxIB bpe3CyG9Q64YM85f55mrwBXsKPK+DdI+TfloLkPu/Gr3/eKm/hvpaFGvDOw+gbA6 BkjWPSLcB2udeVLphwTNRQBIDL3U+y/zaIDtfMuuo3/f3+DN6lRyp72yMLk+TTJN CEB+S5FaHEvi+xhNM3u3H+5iIGMXM4x5r4Qaok+7TcSvLOjzK5K+OIm7C2Db0TrG 9DTXCLV4Hi7iFPEQGeIxRWeyocT7GfiPbyJL5TUFfdgurAQO2tOxf2nEsDkBgvtW 4cZ0leqwUHANsRmO+pRRbRfl33sptfiOiG4KRkWS6u++6VxK3hGlpSnv7c5FI20=
    =YPzj
    -----END PGP SIGNATURE-----


    --
    To UNSUBSCRIBE, email to [email protected]
    with a subject of "unsubscribe". Trouble? Contact [email protected] Archive: https://lists.debian.org/[email protected]

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)