File _patchinfo of Package patchinfo
<patchinfo incident="319"> <packager>draht</packager> <issue tracker="cve" id="CVE-2014-6271"></issue> <issue tracker="bnc" id="896776">VUL-0: CVE-2014-6271: bash: unexpected code execution with environment variables</issue> <category>security</category> <rating>important</rating> <summary>Important security fix for bash that allows the injection of commands. </summary> <description>This update fixes a bug in the bash shell that allows an attacker to execute arbitrary commands upon shell invocation if he can control the shell's environment. This is particularly dangerous if the shell is used as a cgi interpreter for a web server, or if the shell handles untrusted input inherited in the environment from other sources. </description> </patchinfo>