Skip to content
OpenAdvisories
Medium ELSA-2020-1113 1 CVE

Moderate: bash security update (Oracle Linux 7)

Published Apr 6, 2020 · Updated Apr 6, 2020

Summary

[4.2.46-34]
- BASH_CMD should not be writable in restricted shell
Resolves: #1693181

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 7 bash 0:4.2.46-34.el7
Oracle Linux · 7 bash-doc 0:4.2.46-34.el7

Vulnerabilities 1

  • Unscored —

    rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execu…