RHSA-2014:1865High

Red Hat Security Advisory: bash Shift_JIS security update

Published
November 17, 2014
Last Modified
November 7, 2026

🔗 CVE IDs covered (3)

CVE-2014-7169 →CVE-2014-7186 →CVE-2014-7187 →

📋 Description

CVE-2014-7169 — bash: code execution via specially-crafted environment (Incomplete fix for CVE-2014-6271) CVE-2014-7186 — bash: parser can allow out-of-bounds memory access while handling redir_stack CVE-2014-7187 — bash: off-by-one error in deeply nested flow control constructs

🎯 Affected products8

  • SJIS (v. 5.9.z Server)
  • bash-0:3.2-32.el5_9.3.sjis.1.i386 as a component of SJIS (v. 5.9.z Server)
  • bash-0:3.2-32.el5_9.3.sjis.1.ia64 as a component of SJIS (v. 5.9.z Server)
  • bash-0:3.2-32.el5_9.3.sjis.1.src as a component of SJIS (v. 5.9.z Server)
  • bash-0:3.2-32.el5_9.3.sjis.1.x86_64 as a component of SJIS (v. 5.9.z Server)
  • bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386 as a component of SJIS (v. 5.9.z Server)
  • bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64 as a component of SJIS (v. 5.9.z Server)
  • bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64 as a component of SJIS (v. 5.9.z Server)

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258

🔗 References (5)