Advisories » MGAA-2014-0180

Updated bash packages fix remaining function parser bugs

Publication date: 09 Oct 2014
Modification date: 09 Oct 2014
Type: bugfix
Affected Mageia releases : 3 , 4

Description

Bash has been updated to version 4.2 patch level 53, which fixes the last
remaining known bugs in the parser that bash uses when importing functions.

These bugs are known as CVE-2014-6277 and CVE-2014-6278, but they are not
actually exploitable security issues since 4.2 patch level 50, which was
provided as an update in MGASA-2014-0394.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=14239
• ftp://ftp.cwru.edu/pub/bash/bash-4.2-patches/
• http://advisories.mageia.org/MGASA-2014-0394.html

SRPMS

3/core

• bash-4.2-53.1.mga3

4/core

• bash-4.2-53.1.mga4