RHSA-2017:0725MediumCVSS 7.0

Red Hat Security Advisory: bash security and bug fix update

Published
March 21, 2017
Last Modified
November 5, 2026

🔗 CVE IDs covered (3)

CVE-2016-7543 →CVE-2016-9401 →CVE-2016-0634 →

📋 Description

CVE-2016-0634 — bash: Arbitrary code execution via malicious hostname CVE-2016-7543 — bash: Specially crafted SHELLOPTS+PS4 variables allows command substitution CVE-2016-9401 — bash: popd controlled free

🎯 Affected products48

  • Red Hat Enterprise Linux Desktop (v. 6)
  • Red Hat Enterprise Linux Desktop Optional (v. 6)
  • Red Hat Enterprise Linux HPC Node (v. 6)
  • Red Hat Enterprise Linux HPC Node Optional (v. 6)
  • Red Hat Enterprise Linux Server (v. 6)
  • Red Hat Enterprise Linux Server Optional (v. 6)
  • Red Hat Enterprise Linux Workstation (v. 6)
  • Red Hat Enterprise Linux Workstation Optional (v. 6)
  • bash-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • bash-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)
  • bash-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • bash-0:4.1.2-48.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)
  • bash-0:4.1.2-48.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)
  • bash-0:4.1.2-48.el6.src as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • bash-0:4.1.2-48.el6.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • bash-0:4.1.2-48.el6.src as a component of Red Hat Enterprise Linux Server (v. 6)
  • bash-0:4.1.2-48.el6.src as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • bash-0:4.1.2-48.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • bash-0:4.1.2-48.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • bash-0:4.1.2-48.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)
  • bash-0:4.1.2-48.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • bash-debuginfo-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • bash-debuginfo-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)
  • bash-debuginfo-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)
  • bash-debuginfo-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)
  • bash-debuginfo-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • bash-debuginfo-0:4.1.2-48.el6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)
  • bash-debuginfo-0:4.1.2-48.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)
  • bash-debuginfo-0:4.1.2-48.el6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)
  • bash-debuginfo-0:4.1.2-48.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)
  • +18 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (8)