Red Hat Customer Portal

Skip to main content

Security Advisory Important: bash security update

Advisory: RHSA-2014:1306-3
Type: Security Advisory
Severity: Important
Issued on: 2014-09-26
Last updated on: 2014-09-30
Affected Products: Red Hat Enterprise Linux (v. 5 server)
Red Hat Enterprise Linux Desktop (v. 5 client)
Red Hat Enterprise Linux Desktop (v. 6)
Red Hat Enterprise Linux Desktop (v. 7)
Red Hat Enterprise Linux HPC Node (v. 6)
Red Hat Enterprise Linux HPC Node (v. 7)
Red Hat Enterprise Linux Server (v. 6)
Red Hat Enterprise Linux Server (v. 7)
Red Hat Enterprise Linux Server AUS (v. 6.5)
Red Hat Enterprise Linux Server EUS (v. 6.5.z)
Red Hat Enterprise Linux Workstation (v. 6)
Red Hat Enterprise Linux Workstation (v. 7)
CVEs (cve.mitre.org): CVE-2014-7169
CVE-2014-7186
CVE-2014-7187

Details

[Updated September 30, 2014]
This advisory has been updated with information on restarting system
services after applying this update. No changes have been made to the
original packages.

Updated bash packages that fix one security issue are now available for Red
Hat Enterprise Linux 5, 6, and 7.

Red Hat Product Security has rated this update as having Important security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.

The GNU Bourne Again shell (Bash) is a shell and command language
interpreter compatible with the Bourne shell (sh). Bash is the default
shell for Red Hat Enterprise Linux.

It was found that the fix for CVE-2014-6271 was incomplete, and Bash still
allowed certain characters to be injected into other environments via
specially crafted environment variables. An attacker could potentially use
this flaw to override or bypass environment restrictions to execute shell
commands. Certain services and applications allow remote unauthenticated
attackers to provide environment variables, allowing them to exploit this
issue. (CVE-2014-7169)

Applications which directly create bash functions as environment variables
need to be made aware of changes to the way names are handled by this
update. Note that certain services, screen sessions, and tmux sessions may
need to be restarted, and affected interactive users may need to re-login.
Installing these updated packages without restarting services will address
the vulnerability, but functionality may be impacted until affected
services are restarted. For more information see the Knowledgebase article
at https://access.redhat.com/articles/1200223

Note: Docker users are advised to use "yum update" within their containers,
and to commit the resulting changes.

For additional information on CVE-2014-6271 and CVE-2014-7169, refer to the
aforementioned Knowledgebase article.

All bash users are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue.


Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red
Hat Network to apply this update are available at
https://access.redhat.com/articles/11258

Updated packages

Red Hat Enterprise Linux (v. 5 server)

SRPMS:
bash-3.2-33.el5_11.4.src.rpm     MD5: 3af8306458c61b3a2a2ad68e18758cd4
SHA-256: ae40a63e489c680c56003b664fbf81a6841199862da20b1939ab637eaf95b4f5
 
IA-32:
bash-3.2-33.el5_11.4.i386.rpm     MD5: e579bd3f1fe173393483db540ec1ab13
SHA-256: ca1964b824f69e6ff5bfeb16ec0568ec32675e88fa00bc5ca887a528bbaf2628
bash-debuginfo-3.2-33.el5_11.4.i386.rpm     MD5: c02cb8534ac9ce5ca49141efa3907642
SHA-256: 524959d3e35bca6029d2cf3e25f77ae4e3439bd0e80a75156c6a6bdb226429fa
 
IA-64:
bash-3.2-33.el5_11.4.i386.rpm     MD5: e579bd3f1fe173393483db540ec1ab13
SHA-256: ca1964b824f69e6ff5bfeb16ec0568ec32675e88fa00bc5ca887a528bbaf2628
bash-3.2-33.el5_11.4.ia64.rpm     MD5: 79127d8675bd8d33eaf57fe7916b852f
SHA-256: 19f13a8ecaad220690e2dd5492dc5fa7014d278cb416c2164711713ef57e6f99
bash-debuginfo-3.2-33.el5_11.4.i386.rpm     MD5: c02cb8534ac9ce5ca49141efa3907642
SHA-256: 524959d3e35bca6029d2cf3e25f77ae4e3439bd0e80a75156c6a6bdb226429fa
bash-debuginfo-3.2-33.el5_11.4.ia64.rpm     MD5: cc784c3617bee6202ce38f7513aa425b
SHA-256: cb74fc8f7f5cea2559b78fc2e58d38e185485f28158109bc72ecd5744a25c625
 
PPC:
bash-3.2-33.el5_11.4.ppc.rpm     MD5: b4da99535359873182a314d31581aaca
SHA-256: da5300238c7a6ccec9728f512c5fa38d9f1b3f101c1d3961c8f442188fc000e3
bash-debuginfo-3.2-33.el5_11.4.ppc.rpm     MD5: 418aac0b7b6c58dfe5080ece48db171e
SHA-256: e6384f29cbe217dc60aa5b24aaed6f35c1eeae390995b57be0fb67131e732ebf
 
s390x:
bash-3.2-33.el5_11.4.s390x.rpm     MD5: 53e0c209ba532b652feef7a6d97f14df
SHA-256: fb88688c7a2d6c6896295621eec322caaf9c6cfa215cb67ac7e1168cf3649f99
bash-debuginfo-3.2-33.el5_11.4.s390x.rpm     MD5: 267d17326afeb8f147b251b27e7e72f5
SHA-256: 1812f7617d7bd0589a7d3270e6e4de4d8cdcc8687e7ace0f2cf46144ebaa84f7
 
x86_64:
bash-3.2-33.el5_11.4.x86_64.rpm     MD5: 8ff18a27db1664d9001839ae513313ea
SHA-256: b4e346b54d842237ba1e232972237ce033b5cbf5551670b8266c5c77f21b3bd0
bash-debuginfo-3.2-33.el5_11.4.x86_64.rpm     MD5: be26d35defb2c80a2ee01e5174f21926
SHA-256: 8fbd5e5a89c16360bc01bdc4939daad2ac8c4a742b3e4ad91e714e6b80d6daa3
 
Red Hat Enterprise Linux Desktop (v. 5 client)

SRPMS:
bash-3.2-33.el5_11.4.src.rpm     MD5: 3af8306458c61b3a2a2ad68e18758cd4
SHA-256: ae40a63e489c680c56003b664fbf81a6841199862da20b1939ab637eaf95b4f5
 
IA-32:
bash-3.2-33.el5_11.4.i386.rpm     MD5: e579bd3f1fe173393483db540ec1ab13
SHA-256: ca1964b824f69e6ff5bfeb16ec0568ec32675e88fa00bc5ca887a528bbaf2628
bash-debuginfo-3.2-33.el5_11.4.i386.rpm     MD5: c02cb8534ac9ce5ca49141efa3907642
SHA-256: 524959d3e35bca6029d2cf3e25f77ae4e3439bd0e80a75156c6a6bdb226429fa
 
x86_64:
bash-3.2-33.el5_11.4.x86_64.rpm     MD5: 8ff18a27db1664d9001839ae513313ea
SHA-256: b4e346b54d842237ba1e232972237ce033b5cbf5551670b8266c5c77f21b3bd0
bash-debuginfo-3.2-33.el5_11.4.x86_64.rpm     MD5: be26d35defb2c80a2ee01e5174f21926
SHA-256: 8fbd5e5a89c16360bc01bdc4939daad2ac8c4a742b3e4ad91e714e6b80d6daa3
 
Red Hat Enterprise Linux Desktop (v. 6)

SRPMS:
bash-4.1.2-15.el6_5.2.src.rpm
File outdated by:  RHBA-2016:0800
    MD5: 580160fd15ba3c2d78298c1d21e3927e
SHA-256: e3673bbcf41be4af0d7dc0ffa14880860f285b192de5e4e4985495c3a11c3bb5
 
IA-32:
bash-4.1.2-15.el6_5.2.i686.rpm
File outdated by:  RHBA-2016:0800
    MD5: 8b9aa013e3afd4883ce44f5987586a96
SHA-256: 165fadc672eae3c106f3abbd8bb87d5de5879b3704bf35a890f0faa11f7c4b75
bash-debuginfo-4.1.2-15.el6_5.2.i686.rpm
File outdated by:  RHBA-2016:0800
    MD5: 40089a9431543a4780ef475979fd0d29
SHA-256: 8d666ac5b906707c6498e465c4a6d7d411e2cacbae851350eb21e50778991624
bash-doc-4.1.2-15.el6_5.2.i686.rpm
File outdated by:  RHBA-2016:0800
    MD5: 3d929a0828babf187d714143e3dbefb8
SHA-256: 26ee34fa3c612b9b3e315e4f3c70d62396d80b63558994aea1260dedaa978a7f
 
x86_64:
bash-4.1.2-15.el6_5.2.x86_64.rpm
File outdated by:  RHBA-2016:0800
    MD5: 7dfec6a0e0368bed638dedd9b88e5596
SHA-256: c911010bb31bcf6248495b54762d4030810f8bcb4a7e5af340f94f9c7963c7b1
bash-debuginfo-4.1.2-15.el6_5.2.x86_64.rpm
File outdated by:  RHBA-2016:0800
    MD5: 97a1826ff075b8fb58f9593f5b8c147d
SHA-256: d014b8af0424f322df9a175a5cbd26abd89016ff5388a5199e1f4d9173782560
bash-doc-4.1.2-15.el6_5.2.x86_64.rpm
File outdated by:  RHBA-2016:0800
    MD5: 102681eb083b625cf1d9a11584859f81
SHA-256: ff50cebfacadd4115acf8295c50fb8a4d14961792e51b8d86c1987746afd294d
 
Red Hat Enterprise Linux Desktop (v. 7)

SRPMS:
bash-4.2.45-5.el7_0.4.src.rpm
File outdated by:  RHBA-2015:2144
    MD5: dea1318dd1af1906c2258b843872b756
SHA-256: 93a46bc51a3333adafaa3126cf5db326830544d31b307416b8b2122910ab0d92
 
x86_64:
bash-4.2.45-5.el7_0.4.x86_64.rpm
File outdated by:  RHBA-2015:2144
    MD5: a3c72c009b039490a47ecb1fb47859eb
SHA-256: b5f7ac4bebad5f50b58c0fd49a1758b41370efcc033cfd4c5931374f13f3979a
bash-debuginfo-4.2.45-5.el7_0.4.x86_64.rpm
File outdated by:  RHBA-2015:2144
    MD5: c5bcbaa6e4aea61d8c3cb2c26982ee7c
SHA-256: e6b343755660f4732b9be25491b1d13f79345ba45f6d46e85f0ccdbe4c3a2bef
bash-doc-4.2.45-5.el7_0.4.x86_64.rpm
File outdated by:  RHBA-2015:2144
    MD5: 5c5ffb06424ae408d7958b069193f806
SHA-256: 89bd7624c0eff7d8f9cdabe9c6156a01ad2ff3e5a16ca540bdea329d3bc3eb59
 
Red Hat Enterprise Linux HPC Node (v. 6)

SRPMS:
bash-4.1.2-15.el6_5.2.src.rpm
File outdated by:  RHBA-2016:0800
    MD5: 580160fd15ba3c2d78298c1d21e3927e
SHA-256: e3673bbcf41be4af0d7dc0ffa14880860f285b192de5e4e4985495c3a11c3bb5
 
x86_64:
bash-4.1.2-15.el6_5.2.x86_64.rpm
File outdated by:  RHBA-2016:0800
    MD5: 7dfec6a0e0368bed638dedd9b88e5596
SHA-256: c911010bb31bcf6248495b54762d4030810f8bcb4a7e5af340f94f9c7963c7b1
bash-debuginfo-4.1.2-15.el6_5.2.x86_64.rpm
File outdated by:  RHBA-2016:0800
    MD5: 97a1826ff075b8fb58f9593f5b8c147d
SHA-256: d014b8af0424f322df9a175a5cbd26abd89016ff5388a5199e1f4d9173782560
bash-doc-4.1.2-15.el6_5.2.x86_64.rpm
File outdated by:  RHBA-2016:0800
    MD5: 102681eb083b625cf1d9a11584859f81
SHA-256: ff50cebfacadd4115acf8295c50fb8a4d14961792e51b8d86c1987746afd294d
 
Red Hat Enterprise Linux HPC Node (v. 7)

SRPMS:
bash-4.2.45-5.el7_0.4.src.rpm
File outdated by:  RHBA-2015:2144
    MD5: dea1318dd1af1906c2258b843872b756
SHA-256: 93a46bc51a3333adafaa3126cf5db326830544d31b307416b8b2122910ab0d92
 
x86_64:
bash-4.2.45-5.el7_0.4.x86_64.rpm
File outdated by:  RHBA-2015:2144
    MD5: a3c72c009b039490a47ecb1fb47859eb
SHA-256: b5f7ac4bebad5f50b58c0fd49a1758b41370efcc033cfd4c5931374f13f3979a
bash-debuginfo-4.2.45-5.el7_0.4.x86_64.rpm
File outdated by:  RHBA-2015:2144
    MD5: c5bcbaa6e4aea61d8c3cb2c26982ee7c
SHA-256: e6b343755660f4732b9be25491b1d13f79345ba45f6d46e85f0ccdbe4c3a2bef
bash-doc-4.2.45-5.el7_0.4.x86_64.rpm
File outdated by:  RHBA-2015:2144
    MD5: 5c5ffb06424ae408d7958b069193f806
SHA-256: 89bd7624c0eff7d8f9cdabe9c6156a01ad2ff3e5a16ca540bdea329d3bc3eb59
 
Red Hat Enterprise Linux Server (v. 6)

SRPMS:
bash-4.1.2-15.el6_5.2.src.rpm
File outdated by:  RHBA-2016:0800
    MD5: 580160fd15ba3c2d78298c1d21e3927e
SHA-256: e3673bbcf41be4af0d7dc0ffa14880860f285b192de5e4e4985495c3a11c3bb5
 
IA-32:
bash-4.1.2-15.el6_5.2.i686.rpm
File outdated by:  RHBA-2016:0800
    MD5: 8b9aa013e3afd4883ce44f5987586a96
SHA-256: 165fadc672eae3c106f3abbd8bb87d5de5879b3704bf35a890f0faa11f7c4b75
bash-debuginfo-4.1.2-15.el6_5.2.i686.rpm
File outdated by:  RHBA-2016:0800
    MD5: 40089a9431543a4780ef475979fd0d29
SHA-256: 8d666ac5b906707c6498e465c4a6d7d411e2cacbae851350eb21e50778991624
bash-doc-4.1.2-15.el6_5.2.i686.rpm
File outdated by:  RHBA-2016:0800
    MD5: 3d929a0828babf187d714143e3dbefb8
SHA-256: 26ee34fa3c612b9b3e315e4f3c70d62396d80b63558994aea1260dedaa978a7f
 
PPC:
bash-4.1.2-15.el6_5.2.ppc64.rpm
File outdated by:  RHBA-2016:0800
    MD5: 2ee9b0d6b39e7fb6dce770d4098affb0
SHA-256: 019ee5b351eea75748de5058364f49dbd49a88e5fd28446dd17046c7f7369f43
bash-debuginfo-4.1.2-15.el6_5.2.ppc64.rpm
File outdated by:  RHBA-2016:0800
    MD5: a4de792769cd457c7e5c5a5f84cc5ed1
SHA-256: 80b965be7290592c65d269df4eb3e76e59d8ce4beba4bc5ea0aabca1936e2329
bash-doc-4.1.2-15.el6_5.2.ppc64.rpm
File outdated by:  RHBA-2016:0800
    MD5: 8fc6036b5a56938c9ab665e9a882ae83
SHA-256: ffb446c7870e30c847d2c74bcbd0c3382458b6f1b712a2ff3e81aaf794cffda8
 
s390x:
bash-4.1.2-15.el6_5.2.s390x.rpm
File outdated by:  RHBA-2016:0800
    MD5: 6e4eb88bb6bae46b948c1501ea63eaf7
SHA-256: fd9bd392636afe01f5480099da0f67cb6f35c052a3e7a41cc501e9a153e13858
bash-debuginfo-4.1.2-15.el6_5.2.s390x.rpm
File outdated by:  RHBA-2016:0800
    MD5: 3aaba57e8c8cd5e0d1c660fc0c4185ed
SHA-256: 42072c38de645898af89dab660664d892938c426eb1ba6923258c062d7375c0f
bash-doc-4.1.2-15.el6_5.2.s390x.rpm
File outdated by:  RHBA-2016:0800
    MD5: 287954768776bc377d012cce5dec6ea6
SHA-256: c72c4a98ea10cf9765ffd9739dce2fe64c646c70740b8ddd18c139ba9234db84
 
x86_64:
bash-4.1.2-15.el6_5.2.x86_64.rpm
File outdated by:  RHBA-2016:0800
    MD5: 7dfec6a0e0368bed638dedd9b88e5596
SHA-256: c911010bb31bcf6248495b54762d4030810f8bcb4a7e5af340f94f9c7963c7b1
bash-debuginfo-4.1.2-15.el6_5.2.x86_64.rpm
File outdated by:  RHBA-2016:0800
    MD5: 97a1826ff075b8fb58f9593f5b8c147d
SHA-256: d014b8af0424f322df9a175a5cbd26abd89016ff5388a5199e1f4d9173782560
bash-doc-4.1.2-15.el6_5.2.x86_64.rpm
File outdated by:  RHBA-2016:0800
    MD5: 102681eb083b625cf1d9a11584859f81
SHA-256: ff50cebfacadd4115acf8295c50fb8a4d14961792e51b8d86c1987746afd294d
 
Red Hat Enterprise Linux Server (v. 7)

SRPMS:
bash-4.2.45-5.el7_0.4.src.rpm
File outdated by:  RHBA-2015:2144
    MD5: dea1318dd1af1906c2258b843872b756
SHA-256: 93a46bc51a3333adafaa3126cf5db326830544d31b307416b8b2122910ab0d92
 
PPC:
bash-4.2.45-5.el7_0.4.ppc64.rpm
File outdated by:  RHBA-2015:2144
    MD5: b68adbf18703d4461877a17e29519858
SHA-256: 5b31874946ee4faf368fe6fd967cc19efac75712d172b6502ebbcfd919408b30
bash-debuginfo-4.2.45-5.el7_0.4.ppc64.rpm
File outdated by:  RHBA-2015:2144
    MD5: ec425f699261f7bc6af364e02b1a5369
SHA-256: 90b8ef065bc1d0919e023de4658959d14266ec8e9428064184dd78fc47cd0419
bash-doc-4.2.45-5.el7_0.4.ppc64.rpm
File outdated by:  RHBA-2015:2144
    MD5: ea22776ce0f6db822bb89c20f67e4ae0
SHA-256: 04ca34b281fbabcc733c8fbea7074eef72a9e99f0d55f436bc58872e2dbdf549
 
s390x:
bash-4.2.45-5.el7_0.4.s390x.rpm
File outdated by:  RHBA-2015:2144
    MD5: e906729f3f3adb29192564c89ec58f9b
SHA-256: 41abbc09c503c153b12f2fe1d09dae046b433502cf309c7835453154645d9681
bash-debuginfo-4.2.45-5.el7_0.4.s390x.rpm
File outdated by:  RHBA-2015:2144
    MD5: 521578c96d4af69f57cc69127db5468e
SHA-256: 7ede7417f30b5b62a02de90886cb0b33489c2f8f763800748f52bf8288882dd5
bash-doc-4.2.45-5.el7_0.4.s390x.rpm
File outdated by:  RHBA-2015:2144
    MD5: 730326ee96545a2dfa5ad52f526ecd4e
SHA-256: 569bec2e881fc5f5676354612d64498eec65296c27453b4897101cb63e7ed0e4
 
x86_64:
bash-4.2.45-5.el7_0.4.x86_64.rpm
File outdated by:  RHBA-2015:2144
    MD5: a3c72c009b039490a47ecb1fb47859eb
SHA-256: b5f7ac4bebad5f50b58c0fd49a1758b41370efcc033cfd4c5931374f13f3979a
bash-debuginfo-4.2.45-5.el7_0.4.x86_64.rpm
File outdated by:  RHBA-2015:2144
    MD5: c5bcbaa6e4aea61d8c3cb2c26982ee7c
SHA-256: e6b343755660f4732b9be25491b1d13f79345ba45f6d46e85f0ccdbe4c3a2bef
bash-doc-4.2.45-5.el7_0.4.x86_64.rpm
File outdated by:  RHBA-2015:2144
    MD5: 5c5ffb06424ae408d7958b069193f806
SHA-256: 89bd7624c0eff7d8f9cdabe9c6156a01ad2ff3e5a16ca540bdea329d3bc3eb59
 
Red Hat Enterprise Linux Server AUS (v. 6.5)

SRPMS:
bash-4.1.2-15.el6_5.2.src.rpm
File outdated by:  RHBA-2016:0800
    MD5: 580160fd15ba3c2d78298c1d21e3927e
SHA-256: e3673bbcf41be4af0d7dc0ffa14880860f285b192de5e4e4985495c3a11c3bb5
 
x86_64:
bash-4.1.2-15.el6_5.2.x86_64.rpm
File outdated by:  RHBA-2015:1654
    MD5: 7dfec6a0e0368bed638dedd9b88e5596
SHA-256: c911010bb31bcf6248495b54762d4030810f8bcb4a7e5af340f94f9c7963c7b1
bash-debuginfo-4.1.2-15.el6_5.2.x86_64.rpm
File outdated by:  RHBA-2015:1654
    MD5: 97a1826ff075b8fb58f9593f5b8c147d
SHA-256: d014b8af0424f322df9a175a5cbd26abd89016ff5388a5199e1f4d9173782560
bash-doc-4.1.2-15.el6_5.2.x86_64.rpm
File outdated by:  RHBA-2015:1654
    MD5: 102681eb083b625cf1d9a11584859f81
SHA-256: ff50cebfacadd4115acf8295c50fb8a4d14961792e51b8d86c1987746afd294d
 
Red Hat Enterprise Linux Server EUS (v. 6.5.z)

SRPMS:
bash-4.1.2-15.el6_5.2.src.rpm
File outdated by:  RHBA-2016:0800
    MD5: 580160fd15ba3c2d78298c1d21e3927e
SHA-256: e3673bbcf41be4af0d7dc0ffa14880860f285b192de5e4e4985495c3a11c3bb5
 
IA-32:
bash-4.1.2-15.el6_5.2.i686.rpm
File outdated by:  RHBA-2015:1654
    MD5: 8b9aa013e3afd4883ce44f5987586a96
SHA-256: 165fadc672eae3c106f3abbd8bb87d5de5879b3704bf35a890f0faa11f7c4b75
bash-debuginfo-4.1.2-15.el6_5.2.i686.rpm
File outdated by:  RHBA-2015:1654
    MD5: 40089a9431543a4780ef475979fd0d29
SHA-256: 8d666ac5b906707c6498e465c4a6d7d411e2cacbae851350eb21e50778991624
bash-doc-4.1.2-15.el6_5.2.i686.rpm
File outdated by:  RHBA-2015:1654
    MD5: 3d929a0828babf187d714143e3dbefb8
SHA-256: 26ee34fa3c612b9b3e315e4f3c70d62396d80b63558994aea1260dedaa978a7f
 
PPC:
bash-4.1.2-15.el6_5.2.ppc64.rpm
File outdated by:  RHBA-2015:1654
    MD5: 2ee9b0d6b39e7fb6dce770d4098affb0
SHA-256: 019ee5b351eea75748de5058364f49dbd49a88e5fd28446dd17046c7f7369f43
bash-debuginfo-4.1.2-15.el6_5.2.ppc64.rpm
File outdated by:  RHBA-2015:1654
    MD5: a4de792769cd457c7e5c5a5f84cc5ed1
SHA-256: 80b965be7290592c65d269df4eb3e76e59d8ce4beba4bc5ea0aabca1936e2329
bash-doc-4.1.2-15.el6_5.2.ppc64.rpm
File outdated by:  RHBA-2015:1654
    MD5: 8fc6036b5a56938c9ab665e9a882ae83
SHA-256: ffb446c7870e30c847d2c74bcbd0c3382458b6f1b712a2ff3e81aaf794cffda8
 
s390x:
bash-4.1.2-15.el6_5.2.s390x.rpm
File outdated by:  RHBA-2015:1654
    MD5: 6e4eb88bb6bae46b948c1501ea63eaf7
SHA-256: fd9bd392636afe01f5480099da0f67cb6f35c052a3e7a41cc501e9a153e13858
bash-debuginfo-4.1.2-15.el6_5.2.s390x.rpm
File outdated by:  RHBA-2015:1654
    MD5: 3aaba57e8c8cd5e0d1c660fc0c4185ed
SHA-256: 42072c38de645898af89dab660664d892938c426eb1ba6923258c062d7375c0f
bash-doc-4.1.2-15.el6_5.2.s390x.rpm
File outdated by:  RHBA-2015:1654
    MD5: 287954768776bc377d012cce5dec6ea6
SHA-256: c72c4a98ea10cf9765ffd9739dce2fe64c646c70740b8ddd18c139ba9234db84
 
x86_64:
bash-4.1.2-15.el6_5.2.x86_64.rpm
File outdated by:  RHBA-2015:1654
    MD5: 7dfec6a0e0368bed638dedd9b88e5596
SHA-256: c911010bb31bcf6248495b54762d4030810f8bcb4a7e5af340f94f9c7963c7b1
bash-debuginfo-4.1.2-15.el6_5.2.x86_64.rpm
File outdated by:  RHBA-2015:1654
    MD5: 97a1826ff075b8fb58f9593f5b8c147d
SHA-256: d014b8af0424f322df9a175a5cbd26abd89016ff5388a5199e1f4d9173782560
bash-doc-4.1.2-15.el6_5.2.x86_64.rpm
File outdated by:  RHBA-2015:1654
    MD5: 102681eb083b625cf1d9a11584859f81
SHA-256: ff50cebfacadd4115acf8295c50fb8a4d14961792e51b8d86c1987746afd294d
 
Red Hat Enterprise Linux Workstation (v. 6)

SRPMS:
bash-4.1.2-15.el6_5.2.src.rpm
File outdated by:  RHBA-2016:0800
    MD5: 580160fd15ba3c2d78298c1d21e3927e
SHA-256: e3673bbcf41be4af0d7dc0ffa14880860f285b192de5e4e4985495c3a11c3bb5
 
IA-32:
bash-4.1.2-15.el6_5.2.i686.rpm
File outdated by:  RHBA-2016:0800
    MD5: 8b9aa013e3afd4883ce44f5987586a96
SHA-256: 165fadc672eae3c106f3abbd8bb87d5de5879b3704bf35a890f0faa11f7c4b75
bash-debuginfo-4.1.2-15.el6_5.2.i686.rpm
File outdated by:  RHBA-2016:0800
    MD5: 40089a9431543a4780ef475979fd0d29
SHA-256: 8d666ac5b906707c6498e465c4a6d7d411e2cacbae851350eb21e50778991624
bash-doc-4.1.2-15.el6_5.2.i686.rpm
File outdated by:  RHBA-2016:0800
    MD5: 3d929a0828babf187d714143e3dbefb8
SHA-256: 26ee34fa3c612b9b3e315e4f3c70d62396d80b63558994aea1260dedaa978a7f
 
x86_64:
bash-4.1.2-15.el6_5.2.x86_64.rpm
File outdated by:  RHBA-2016:0800
    MD5: 7dfec6a0e0368bed638dedd9b88e5596
SHA-256: c911010bb31bcf6248495b54762d4030810f8bcb4a7e5af340f94f9c7963c7b1
bash-debuginfo-4.1.2-15.el6_5.2.x86_64.rpm
File outdated by:  RHBA-2016:0800
    MD5: 97a1826ff075b8fb58f9593f5b8c147d
SHA-256: d014b8af0424f322df9a175a5cbd26abd89016ff5388a5199e1f4d9173782560
bash-doc-4.1.2-15.el6_5.2.x86_64.rpm
File outdated by:  RHBA-2016:0800
    MD5: 102681eb083b625cf1d9a11584859f81
SHA-256: ff50cebfacadd4115acf8295c50fb8a4d14961792e51b8d86c1987746afd294d
 
Red Hat Enterprise Linux Workstation (v. 7)

SRPMS:
bash-4.2.45-5.el7_0.4.src.rpm
File outdated by:  RHBA-2015:2144
    MD5: dea1318dd1af1906c2258b843872b756
SHA-256: 93a46bc51a3333adafaa3126cf5db326830544d31b307416b8b2122910ab0d92
 
x86_64:
bash-4.2.45-5.el7_0.4.x86_64.rpm
File outdated by:  RHBA-2015:2144
    MD5: a3c72c009b039490a47ecb1fb47859eb
SHA-256: b5f7ac4bebad5f50b58c0fd49a1758b41370efcc033cfd4c5931374f13f3979a
bash-debuginfo-4.2.45-5.el7_0.4.x86_64.rpm
File outdated by:  RHBA-2015:2144
    MD5: c5bcbaa6e4aea61d8c3cb2c26982ee7c
SHA-256: e6b343755660f4732b9be25491b1d13f79345ba45f6d46e85f0ccdbe4c3a2bef
bash-doc-4.2.45-5.el7_0.4.x86_64.rpm
File outdated by:  RHBA-2015:2144
    MD5: 5c5ffb06424ae408d7958b069193f806
SHA-256: 89bd7624c0eff7d8f9cdabe9c6156a01ad2ff3e5a16ca540bdea329d3bc3eb59
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

1146319 - CVE-2014-7169 bash: code execution via specially-crafted environment (Incomplete fix for CVE-2014-6271)


References



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/