Bash: Privilege escalation — GLSA 202105-34

A vulnerability in Bash may allow users to escalate privileges.

Package	app-shells/bash on all architectures
Affected versions	< 5.0_p11-r1
Unaffected versions	>= 5.0_p11-r1

Bash is the standard GNU Bourne Again SHell.

It was discovered that Bash incorrectly dropped privileges by setting its effective UID to its real UID.

A local attacker could possibly escalate privileges.

There is no known workaround at this time.

All Bash users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=app-shells/bash-5.0_p11-r1"

Release date
May 26, 2021

Latest revision
May 26, 2021: 1

Severity
normal

Exploitable
local

Bugzilla entries