ELSA-2017-1931

ELSA-2017-1931 - bash security and bug fix update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2017-08-07

Description

[4.2.46-28]
- CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd
Resolves: #1429838

[4.2.46-27]
- CVE-2016-7543: Fix for arbitrary code execution via SHELLOPTS+PS4 variables
Resolves: #1426026

[4.2.46-26]
- CVE-2016-0634: Fix for arbitrary code execution via malicious hostname
Resolves: #1379237

[4.2.46-25]
- Plug a leak related to compound assignments
Resolves: #1264101

[4.2.46-24]
- Recognize cd -e
Resolves: #1267478

[4.2.46-23]
- Add a condition before setting pipeline_pgrp to shell_pgrp
Resolves: #1377496

[4.2.46-22]
- Avoid crash in parameter expansion while expanding long strings
Resolves: #1403255

Related CVEs

CVE-2016-9401

CVE-2016-0634

CVE-2016-7543

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	bash-4.2.46-28.el7.src.rpm	e03443d98f471c40969db735a5344843c675267e48b5f2fd3ead520fc23544cd	ELBA-2021-4790	ol7_aarch64_latest
	bash-4.2.46-28.el7.src.rpm	e03443d98f471c40969db735a5344843c675267e48b5f2fd3ead520fc23544cd	ELBA-2021-4790	ol7_aarch64_optional_latest
	bash-4.2.46-28.el7.aarch64.rpm	d7ec4479c9f6d72bbb9590156510224abc35ba61b084c86926595094d609a37f	ELBA-2021-4790	ol7_aarch64_latest
	bash-doc-4.2.46-28.el7.aarch64.rpm	195327aad2ef0075ca5f01855e0e6b4ac92b12058677bf4497d8099595ad4824	ELBA-2021-4790	ol7_aarch64_optional_latest
Oracle Linux 7 (x86_64)	bash-4.2.46-28.el7.src.rpm	e03443d98f471c40969db735a5344843c675267e48b5f2fd3ead520fc23544cd	ELBA-2021-4790	ol7_x86_64_latest_archive
	bash-4.2.46-28.el7.src.rpm	e03443d98f471c40969db735a5344843c675267e48b5f2fd3ead520fc23544cd	ELBA-2021-4790	ol7_x86_64_optional_archive
	bash-4.2.46-28.el7.src.rpm	e03443d98f471c40969db735a5344843c675267e48b5f2fd3ead520fc23544cd	ELBA-2021-4790	ol7_x86_64_u4_base
	bash-4.2.46-28.el7.x86_64.rpm	d4d1ea65bbcb8d2b95bf13785a9cc2f55cca9ebb59b90ac5c6a248b8fb406d03	ELBA-2021-4790	ol7_x86_64_latest_archive
	bash-4.2.46-28.el7.x86_64.rpm	d4d1ea65bbcb8d2b95bf13785a9cc2f55cca9ebb59b90ac5c6a248b8fb406d03	ELBA-2021-4790	ol7_x86_64_u4_base
	bash-doc-4.2.46-28.el7.x86_64.rpm	6318563d5b7050bdf3c7cfea47af20352156c5444344bf22d3eaceda88b85eec	ELBA-2021-4790	ol7_x86_64_optional_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team