SUSE-SU-2014:1223-1: critical: Security update for bash

sle-updates at sle-updates at
Fri Sep 26 17:04:13 MDT 2014

   SUSE Security Update: Security update for bash

Announcement ID:    SUSE-SU-2014:1223-1
Rating:             critical
References:         #896776 
Cross-References:   CVE-2014-6271
Affected Products:
                    SUSE Manager 1.7 for SLE 11 SP2

   An update that fixes one vulnerability is now available.


   bash has been updated to fix a critical security issue.

   In some circumstances, the shell would evaluate shellcode in environment
   variables passed at startup time. This allowed code execution by local or
   remote attackers who could pass environment variables to bash scripts.

   Security Issues:

       * CVE-2014-6271

Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - SUSE Manager 1.7 for SLE 11 SP2:

      zypper in -t patch sleman17sp2-bash-9764

   To bring your system up-to-date, use "zypper patch".

Package List:

   - SUSE Manager 1.7 for SLE 11 SP2 (x86_64):



More information about the sle-updates mailing list