Back to bug 1379630
| Who | When | What | Removed | Added |
|---|---|---|---|---|
| Adam Mariš | 2016-09-27 09:24:34 UTC | Depends On | 1379634 | |
| Adam Mariš | 2016-09-27 09:25:37 UTC | Blocks | 1379635 | |
| Slawomir Czarko | 2016-09-28 08:40:06 UTC | CC | slawomir | |
| Norman Sardella | 2016-09-30 12:55:03 UTC | CC | sardella | |
| Salvatore Bonaccorso | 2016-10-03 15:49:14 UTC | CC | carnil | |
| Dhiru Kholia | 2016-10-04 05:14:28 UTC | Priority | high | medium |
| CC | dkholia | |||
| Whiteboard | impact=important,public=20160916,reported=20160926,source=oss-security,cvss2=6.9/AV:L/AC:M/Au:N/C:C/I:C/A:C,cvss3=7.0/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H,cwe=CWE-77,rhel-5/bash=new,rhel-6/bash=new,rhel-7/bash=new,fedora-all/bash=affected | impact=moderate,public=20160916,reported=20160926,source=oss-security,cvss2=6.9/AV:L/AC:M/Au:N/C:C/I:C/A:C,cvss3=7.0/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H,cwe=CWE-77,rhel-5/bash=new,rhel-6/bash=new,rhel-7/bash=new,fedora-all/bash=affected | ||
| Severity | high | medium | ||
| Dhiru Kholia | 2016-10-05 06:05:45 UTC | Whiteboard | impact=moderate,public=20160916,reported=20160926,source=oss-security,cvss2=6.9/AV:L/AC:M/Au:N/C:C/I:C/A:C,cvss3=7.0/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H,cwe=CWE-77,rhel-5/bash=new,rhel-6/bash=new,rhel-7/bash=new,fedora-all/bash=affected | impact=moderate,public=20160916,reported=20160926,source=oss-security,cvss2=6.9/AV:L/AC:M/Au:N/C:C/I:C/A:C,cvss3=7.0/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H,cwe=CWE-77,rhel-5/bash=affected,rhel-6/bash=affected,rhel-7/bash=affected,fedora-all/bash=affected |
| Dhiru Kholia | 2016-10-12 11:07:39 UTC | Whiteboard | impact=moderate,public=20160916,reported=20160926,source=oss-security,cvss2=6.9/AV:L/AC:M/Au:N/C:C/I:C/A:C,cvss3=7.0/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H,cwe=CWE-77,rhel-5/bash=affected,rhel-6/bash=affected,rhel-7/bash=affected,fedora-all/bash=affected | impact=moderate,public=20160916,reported=20160926,source=oss-security,cvss2=6.9/AV:L/AC:M/Au:N/C:C/I:C/A:C,cvss3=7.0/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H,cwe=CWE-77,rhel-5/bash=wontfix,rhel-6/bash=wontfix,rhel-7/bash=wontfix,fedora-all/bash=affected |
| Frank Hirtz | 2016-11-03 20:46:08 UTC | CC | fhirtz | |
| Huzaifa S. Sidhpurwala | 2016-12-02 05:51:31 UTC | Whiteboard | impact=moderate,public=20160916,reported=20160926,source=oss-security,cvss2=6.9/AV:L/AC:M/Au:N/C:C/I:C/A:C,cvss3=7.0/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H,cwe=CWE-77,rhel-5/bash=wontfix,rhel-6/bash=wontfix,rhel-7/bash=wontfix,fedora-all/bash=affected | impact=moderate,public=20160916,reported=20160926,source=oss-security,cvss2=6.9/AV:L/AC:M/Au:N/C:C/I:C/A:C,cvss3=7.0/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H,cwe=CWE-77,rhel-5/bash=wontfix,rhel-6/bash=affected,rhel-7/bash=wontfix,fedora-all/bash=affected |
| Huzaifa S. Sidhpurwala | 2016-12-02 05:52:12 UTC | Depends On | 1400793 | |
| Huzaifa S. Sidhpurwala | 2016-12-02 05:54:29 UTC | Whiteboard | impact=moderate,public=20160916,reported=20160926,source=oss-security,cvss2=6.9/AV:L/AC:M/Au:N/C:C/I:C/A:C,cvss3=7.0/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H,cwe=CWE-77,rhel-5/bash=wontfix,rhel-6/bash=affected,rhel-7/bash=wontfix,fedora-all/bash=affected | impact=moderate,public=20160916,reported=20160926,source=oss-security,cvss2=6.9/AV:L/AC:M/Au:N/C:C/I:C/A:C,cvss3=7.0/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H,cwe=CWE-77,rhel-5/bash=wontfix,rhel-6/bash=wontfix,rhel-7/bash=wontfix,fedora-all/bash=affected |
| Huzaifa S. Sidhpurwala | 2016-12-02 05:56:37 UTC | Blocks | 1386080 | |
| Martin Kyral | 2017-02-22 14:53:51 UTC | CC | mkyral | |
| Dhiru Kholia | 2017-02-23 03:42:58 UTC | Whiteboard | impact=moderate,public=20160916,reported=20160926,source=oss-security,cvss2=6.9/AV:L/AC:M/Au:N/C:C/I:C/A:C,cvss3=7.0/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H,cwe=CWE-77,rhel-5/bash=wontfix,rhel-6/bash=wontfix,rhel-7/bash=wontfix,fedora-all/bash=affected | impact=moderate,public=20160916,reported=20160926,source=oss-security,cvss2=6.9/AV:L/AC:M/Au:N/C:C/I:C/A:C,cvss3=7.0/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H,cwe=CWE-77,rhel-5/bash=wontfix,rhel-6/bash=affected,rhel-7/bash=affected,fedora-all/bash=affected |
| Dhiru Kholia | 2017-02-23 03:43:43 UTC | Depends On | 1426026 | |
| Dhiru Kholia | 2017-02-23 03:47:59 UTC | Blocks | 1415638 | |
| Dhiru Kholia | 2017-03-02 08:03:31 UTC | Doc Text | An arbitrary command injection flaw was found in the way bash processed the SHELLOPTS and PS4 environment variables. A local authenticated attacker could use this flaw to exploit poorly written setuid programs to elevate their privileges under certain circumstances. | |
| Dhiru Kholia | 2017-03-02 08:04:25 UTC | Doc Text | An arbitrary command injection flaw was found in the way bash processed the SHELLOPTS and PS4 environment variables. A local authenticated attacker could use this flaw to exploit poorly written setuid programs to elevate their privileges under certain circumstances. | An arbitrary command injection flaw was found in the way bash processed the SHELLOPTS and PS4 environment variables. A local authenticated attacker could use this flaw to exploit poorly written setuid programs, to elevate their privileges under certain circumstances. |
| Eric Christensen | 2017-03-02 18:35:05 UTC | Doc Text | An arbitrary command injection flaw was found in the way bash processed the SHELLOPTS and PS4 environment variables. A local authenticated attacker could use this flaw to exploit poorly written setuid programs, to elevate their privileges under certain circumstances. | An arbitrary command injection flaw was found in the way bash processed the SHELLOPTS and PS4 environment variables. A local, authenticated attacker could use this flaw to exploit poorly written setuid programs to elevate their privileges under certain circumstances. |
| PnT Account Manager | 2018-03-29 22:01:40 UTC | CC | dkholia | |
| Product Security DevOps Team | 2019-06-08 02:59:08 UTC | Status | NEW | CLOSED |
| Resolution | --- | ERRATA | ||
| Last Closed | 2019-06-08 02:59:08 UTC | |||
| Product Security DevOps Team | 2019-09-29 13:57:05 UTC | Whiteboard | impact=moderate,public=20160916,reported=20160926,source=oss-security,cvss2=6.9/AV:L/AC:M/Au:N/C:C/I:C/A:C,cvss3=7.0/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H,cwe=CWE-77,rhel-5/bash=wontfix,rhel-6/bash=affected,rhel-7/bash=affected,fedora-all/bash=affected |
Back to bug 1379630