[ GLSA 202105-34 ] Bash

[GLSA]

Gentoo Linux Security Advisory

Title: Bash: Privilege escalation (GLSA 202105-34)
Severity: normal
Exploitable: local
Date: 2021-05-26
Bug(s): #702488
ID: 202105-34

Synopsis

A vulnerability in Bash may allow users to escalate privileges.

Background

Bash is the standard GNU Bourne Again SHell.

Affected Packages

Package: app-shells/bash
Vulnerable: < 5.0_p11-r1
Unaffected: >= 5.0_p11-r1
Architectures: All supported architectures


Description

It was discovered that Bash incorrectly dropped privileges by setting
its effective UID to its real UID.


Impact

A local attacker could possibly escalate privileges.

Workaround

There is no known workaround at this time.

Resolution

All Bash users should upgrade to the latest version: