Bug 523646

Summary:	app-shells/bash command injection with cve removed to avoid people finding this
Product:	Gentoo Linux	Reporter:	Carter Young <ecyoung>
Component:	Current packages	Assignee:	Gentoo Linux bug wranglers <bug-wranglers>
Status:	RESOLVED DUPLICATE
Severity:	critical	CC:	bircoph
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://bugzilla.redhat.com/show_bug.cgi?id=1141597
Whiteboard:
Package list:		Runtime testing required:	---

Description Carter Young 2014-09-24 20:45:47 UTC

I could attach all the patch Backports to this Bug but since I am neither the BASH maintainer nor have I ever turned in a CVE request, please let this serve as the template bug for whatever needs to be done to patch this in the interim.

Comment 1 Carter Young 2014-09-24 20:47:13 UTC

See also: https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/

Comment 2 Andrew Savchenko gentoo-dev

2014-09-24 20:55:02 UTC

Duplicates bug 523592

Comment 3 Carter Young 2014-09-24 21:01:49 UTC


*** This bug has been marked as a duplicate of bug 523592 ***