]> git.ipfire.org Git - ipfire-2.x.git/commit
projects / ipfire-2.x.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 34ebab4) | patch
bash: Fix for CVE-2014-6271
authorMichael Tremer <michael.tremer@ipfire.org>
Wed, 24 Sep 2014 16:48:35 +0000 (18:48 +0200)
committerMichael Tremer <michael.tremer@ipfire.org>
Wed, 24 Sep 2014 16:48:35 +0000 (18:48 +0200)
commit6cda6f906eafb269ea7362343b8af609b3d9ce41
treef9cffc0ac043782cfa27c9782423d157c26014cetree | snapshot
parent34ebab463b96f2b1d7876d9bce1b1db4411f6399commit | diff
bash: Fix for CVE-2014-6271

A flaw was found in the way Bash evaluated certain specially crafted
environment variables. An attacker could use this flaw to override
or bypass environment restrictions to execute shell commands.
Certain services and applications allow remote unauthenticated
attackers to provide environment variables, allowing them to exploit
this issue.
lfs/bash diff | blob | blame | history
src/patches/bash-3.2-CVE-2014-6271.patch [new file with mode: 0644] blob
IPFire 2.x development tree