[FITS] Created: (FL-2936) CVE-2014-7169 additional bash "shellshock"

[Michael K. Johnson (FITS)]

CVE-2014-7169 additional bash "shellshock"
------------------------------------------

Key: FL-2936
URL: https://issues.foresightlinux.org/jira/browse/FL-2936
Project: Foresight Linux
Issue Type: Bug
Security Level: Public (Everyone can see this issue)
Components: Base Operating System
Reporter: Michael K. Johnson
Assignee: Michael K. Johnson
Priority: Critical
Fix For: 2.5.x




--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://issues.foresightlinux.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

[Michael K. Johnson (FITS)]

[ https://issues.foresightlinux.org/jira/browse/FL-2936?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Michael K. Johnson updated FL-2936:
-----------------------------------

Description: The initial fix for the "shellshock" vulnerability was incomplete, as described at CVE-2014-7169. Additional patches are available.
Summary: CVE-2014-7169 additional bash "shellshock" vulnerability (was: CVE-2014-7169 additional bash "shellshock")

> CVE-2014-7169 additional bash "shellshock" vulnerability
> --------------------------------------------------------

>
> Key: FL-2936
> URL: https://issues.foresightlinux.org/jira/browse/FL-2936
> Project: Foresight Linux
> Issue Type: Bug

> Security Level: Public(Everyone can see this issue)

> Components: Base Operating System
> Reporter: Michael K. Johnson
> Assignee: Michael K. Johnson
> Priority: Critical
> Fix For: 2.5.x
>
>

> The initial fix for the "shellshock" vulnerability was incomplete, as described at CVE-2014-7169. Additional patches are available.

[Michael K. Johnson (FITS)]

[ https://issues.foresightlinux.org/jira/browse/FL-2936?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18003#action_18003 ]

Michael K. Johnson commented on FL-2936:
----------------------------------------

Addressed with three additional patches in {{bash=foresight.rpath.org@fl:2-devel/4.2.48-2-1}}

{{fl:2-devel}} group build underway

> CVE-2014-7169 additional bash "shellshock" vulnerability
> --------------------------------------------------------
>

> Key: FL-2936
> URL: https://issues.foresightlinux.org/jira/browse/FL-2936
> Project: Foresight Linux
> Issue Type: Bug

> Security Level: Public(Everyone can see this issue)

> Components: Base Operating System
> Reporter: Michael K. Johnson
> Assignee: Michael K. Johnson
> Priority: Critical
> Fix For: 2.5.x
>
>

> The initial fix for the "shellshock" vulnerability was incomplete, as described at CVE-2014-7169. Additional patches are available.

[Michael K. Johnson (FITS)]

[ https://issues.foresightlinux.org/jira/browse/FL-2936?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Michael K. Johnson reassigned FL-2936:
--------------------------------------

Assignee: Tomas Forsman (was: Michael K. Johnson)

Tomas,

I'll be asleep by the time the group build finishes. Please feel free to test and promote to fl:2-qa for the update...

> CVE-2014-7169 additional bash "shellshock" vulnerability
> --------------------------------------------------------
>

> Key: FL-2936
> URL: https://issues.foresightlinux.org/jira/browse/FL-2936
> Project: Foresight Linux
> Issue Type: Bug

> Security Level: Public(Everyone can see this issue)

> Components: Base Operating System
> Reporter: Michael K. Johnson

> Assignee: Tomas Forsman

> Priority: Critical
> Fix For: 2.5.x
>
>

> The initial fix for the "shellshock" vulnerability was incomplete, as described at CVE-2014-7169. Additional patches are available.

[Tomas Forsman (FITS)]

[ https://issues.foresightlinux.org/jira/browse/FL-2936?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Tomas Forsman resolved FL-2936.
-------------------------------

Resolution: Fixed

Promoted to fl:2-qa and groups are rebuilt.

> CVE-2014-7169 additional bash "shellshock" vulnerability
> --------------------------------------------------------
>

> Key: FL-2936
> URL: https://issues.foresightlinux.org/jira/browse/FL-2936
> Project: Foresight Linux
> Issue Type: Bug

> Security Level: Public(Everyone can see this issue)

> Components: Base Operating System
> Reporter: Michael K. Johnson

> Assignee: Tomas Forsman

> Priority: Critical
> Fix For: 2.5.x
>
>

> The initial fix for the "shellshock" vulnerability was incomplete, as described at CVE-2014-7169. Additional patches are available.

[Tomas Forsman (FITS)]

[ https://issues.foresightlinux.org/jira/browse/FL-2936?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Tomas Forsman closed FL-2936.
-----------------------------

> CVE-2014-7169 additional bash "shellshock" vulnerability
> --------------------------------------------------------
>

> Key: FL-2936
> URL: https://issues.foresightlinux.org/jira/browse/FL-2936
> Project: Foresight Linux
> Issue Type: Bug

> Security Level: Public(Everyone can see this issue)

> Components: Base Operating System
> Reporter: Michael K. Johnson

> Assignee: Tomas Forsman

> Priority: Critical
> Fix For: 2.5.x
>
>

> The initial fix for the "shellshock" vulnerability was incomplete, as described at CVE-2014-7169. Additional patches are available.