Skip to content
OpenAdvisories
Critical 1 exploited CVE RHSA-2014:1293 1 CVE

Red Hat Security Advisory: bash security update

Published Sep 13, 2024 · Updated Jul 29, 2026

Ecosystem: Red Hat

Fixed packages 28

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client bash 0:3.2-33.el5.1
Red Hat · RHEL 5 enterprise_linux:5::client bash-debuginfo 0:3.2-33.el5.1
Red Hat · RHEL 5 enterprise_linux:5::server bash 0:3.2-33.el5.1
Red Hat · RHEL 5 enterprise_linux:5::server bash-debuginfo 0:3.2-33.el5.1
Red Hat · RHEL 6 enterprise_linux:6::client bash 0:4.1.2-15.el6_5.1
Red Hat · RHEL 6 enterprise_linux:6::client bash-debuginfo 0:4.1.2-15.el6_5.1
Red Hat · RHEL 6 enterprise_linux:6::client bash-doc 0:4.1.2-15.el6_5.1
Red Hat · RHEL 6 enterprise_linux:6::computenode bash 0:4.1.2-15.el6_5.1
Red Hat · RHEL 6 enterprise_linux:6::computenode bash-debuginfo 0:4.1.2-15.el6_5.1
Red Hat · RHEL 6 enterprise_linux:6::computenode bash-doc 0:4.1.2-15.el6_5.1
Red Hat · RHEL 6 enterprise_linux:6::server bash 0:4.1.2-15.el6_5.1
Red Hat · RHEL 6 enterprise_linux:6::server bash-debuginfo 0:4.1.2-15.el6_5.1
Red Hat · RHEL 6 enterprise_linux:6::server bash-doc 0:4.1.2-15.el6_5.1
Red Hat · RHEL 6 enterprise_linux:6::workstation bash 0:4.1.2-15.el6_5.1
Red Hat · RHEL 6 enterprise_linux:6::workstation bash-debuginfo 0:4.1.2-15.el6_5.1
Red Hat · RHEL 6 enterprise_linux:6::workstation bash-doc 0:4.1.2-15.el6_5.1
Red Hat · RHEL 7 enterprise_linux:7::client bash 0:4.2.45-5.el7_0.2
Red Hat · RHEL 7 enterprise_linux:7::client bash-debuginfo 0:4.2.45-5.el7_0.2
Red Hat · RHEL 7 enterprise_linux:7::client bash-doc 0:4.2.45-5.el7_0.2
Red Hat · RHEL 7 enterprise_linux:7::computenode bash 0:4.2.45-5.el7_0.2
Red Hat · RHEL 7 enterprise_linux:7::computenode bash-debuginfo 0:4.2.45-5.el7_0.2
Red Hat · RHEL 7 enterprise_linux:7::computenode bash-doc 0:4.2.45-5.el7_0.2
Red Hat · RHEL 7 enterprise_linux:7::server bash 0:4.2.45-5.el7_0.2
Red Hat · RHEL 7 enterprise_linux:7::server bash-debuginfo 0:4.2.45-5.el7_0.2
Red Hat · RHEL 7 enterprise_linux:7::server bash-doc 0:4.2.45-5.el7_0.2
Red Hat · RHEL 7 enterprise_linux:7::workstation bash 0:4.2.45-5.el7_0.2
Red Hat · RHEL 7 enterprise_linux:7::workstation bash-debuginfo 0:4.2.45-5.el7_0.2
Red Hat · RHEL 7 enterprise_linux:7::workstation bash-doc 0:4.2.45-5.el7_0.2

Vulnerabilities 1

  • Critical 9.8
    CVE-2014-6271 Exploited Public exploit Scanner template EPSS 100%

    GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, whic…

    bash bash Debian Ubuntu
    KEV Jan 28, 2022

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    https://access.redhat.com/articles/1200223
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1141597
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1293.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-6271
  • article
    https://access.redhat.com/security/vulnerabilities/shellshock
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6271
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6271
  • article
    https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack
  • article
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog