tocsin

Debian/bash: high 7.8

rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with the permissions of the shell.

Action: Upgrade bash to 4.4-1 or later.

Affected

introducedfixedlast affected
04.4-1-

Fixed versions

4.4-1

Sources

published · modified · JSON