Synopsis

Low: bash security and bug fix update

Type/Severity

Security Advisory: Low

Topic

Updated bash packages that fix one security issue and several bugs are now
available for Red Hat Enterprise Linux 4.

The Red Hat Security Response Team has rated this update as having low
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.

Description

Bash (Bourne-again shell) is the default shell for Red Hat Enterprise
Linux.

It was found that certain scripts bundled with the Bash documentation
created temporary files in an insecure way. A malicious, local user could
use this flaw to conduct a symbolic link attack, allowing them to overwrite
the contents of arbitrary files accessible to the victim running the
scripts. (CVE-2008-5374)

This update also fixes the following bugs:

• If a child process's PID was the same as the PID of a previously ended
  child process, Bash did not wait for that child process. In some cases this
  caused "Resource temporarily unavailable" errors. With this update, Bash
  recycles PIDs and waits for processes with recycled PIDs. (BZ#521134)
  
• Bash's built-in "read" command had a memory leak when "read" failed due
  to no input (pipe for stdin). With this update, the memory is correctly
  freed. (BZ#537029)
  
• Bash did not correctly check for a valid multi-byte string when setting
  the IFS value, causing Bash to crash. With this update, Bash checks the
  multi-byte string and no longer crashes. (BZ#539536)
  
• Bash incorrectly set locale settings when using the built-in "export"
  command and setting the locale on the same line (for example, with
  "LC_ALL=C export LC_ALL"). With this update, Bash correctly sets locale
  settings. (BZ#539538)
  

All bash users should upgrade to these updated packages, which contain
backported patches to correct these issues.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 475474 - CVE-2008-5374 bash: Insecure temporary file use in aliasconv.sh, aliasconv.bash, cshtobash (symlink attack)
• BZ - 521134 - Bash doesn't wait for backgrounded process if its PID is recycled

CVEs

• CVE-2008-5374

References

• https://access.redhat.com/security/updates/classification/#low

Red Hat Enterprise Linux Server 4

SRPM
bash-3.0-27.el4.src.rpm	SHA-256: f548fb8203c753afcbf6bbb4719eeee47bd2fb4df947308241eca96ca80224b2
x86_64
bash-3.0-27.el4.x86_64.rpm	SHA-256: 98781620230a6cd8e0ff96e10d87b3aea8e26f449e3ac4b7e48c2b52b11a17a3
bash-3.0-27.el4.x86_64.rpm	SHA-256: 98781620230a6cd8e0ff96e10d87b3aea8e26f449e3ac4b7e48c2b52b11a17a3
ia64
bash-3.0-27.el4.i386.rpm	SHA-256: 7251155194009c83b14057bb3fb70de1103405495fb7ccc2b3906bb77a0b9593
bash-3.0-27.el4.i386.rpm	SHA-256: 7251155194009c83b14057bb3fb70de1103405495fb7ccc2b3906bb77a0b9593
bash-3.0-27.el4.ia64.rpm	SHA-256: 54ce5c8317a1eab169bc467f0846d3648aa7e0a6eb475d603a763045b0c90d48
bash-3.0-27.el4.ia64.rpm	SHA-256: 54ce5c8317a1eab169bc467f0846d3648aa7e0a6eb475d603a763045b0c90d48
i386
bash-3.0-27.el4.i386.rpm	SHA-256: 7251155194009c83b14057bb3fb70de1103405495fb7ccc2b3906bb77a0b9593
bash-3.0-27.el4.i386.rpm	SHA-256: 7251155194009c83b14057bb3fb70de1103405495fb7ccc2b3906bb77a0b9593

Red Hat Enterprise Linux Workstation 4

SRPM
bash-3.0-27.el4.src.rpm	SHA-256: f548fb8203c753afcbf6bbb4719eeee47bd2fb4df947308241eca96ca80224b2
x86_64
bash-3.0-27.el4.x86_64.rpm	SHA-256: 98781620230a6cd8e0ff96e10d87b3aea8e26f449e3ac4b7e48c2b52b11a17a3
ia64
bash-3.0-27.el4.i386.rpm	SHA-256: 7251155194009c83b14057bb3fb70de1103405495fb7ccc2b3906bb77a0b9593
bash-3.0-27.el4.ia64.rpm	SHA-256: 54ce5c8317a1eab169bc467f0846d3648aa7e0a6eb475d603a763045b0c90d48
i386
bash-3.0-27.el4.i386.rpm	SHA-256: 7251155194009c83b14057bb3fb70de1103405495fb7ccc2b3906bb77a0b9593

Red Hat Enterprise Linux Desktop 4

SRPM
bash-3.0-27.el4.src.rpm	SHA-256: f548fb8203c753afcbf6bbb4719eeee47bd2fb4df947308241eca96ca80224b2
x86_64
bash-3.0-27.el4.x86_64.rpm	SHA-256: 98781620230a6cd8e0ff96e10d87b3aea8e26f449e3ac4b7e48c2b52b11a17a3
i386
bash-3.0-27.el4.i386.rpm	SHA-256: 7251155194009c83b14057bb3fb70de1103405495fb7ccc2b3906bb77a0b9593

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
bash-3.0-27.el4.src.rpm	SHA-256: f548fb8203c753afcbf6bbb4719eeee47bd2fb4df947308241eca96ca80224b2
s390x
bash-3.0-27.el4.s390x.rpm	SHA-256: 5fbf7eba1d8be199bbe135536805491c23776ce512119147034865a58c44aa40
s390
bash-3.0-27.el4.s390.rpm	SHA-256: 9fbb1268f416c87e36d885bff6828eab79e13f6024c3f494b3c82fe46dfd90cb

Red Hat Enterprise Linux for Power, big endian 4

SRPM
bash-3.0-27.el4.src.rpm	SHA-256: f548fb8203c753afcbf6bbb4719eeee47bd2fb4df947308241eca96ca80224b2
ppc
bash-3.0-27.el4.ppc.rpm	SHA-256: 478a12501a7e977777583ea281754507351a50ba11c07d6b8c812b560213fc5a