[Touch-packages] [Bug 1803441] Re: BASH_CMDS is writable in restricted bash shells (fixed upstream, need to backport patch)

2019-03-27 Thread Andrew Zonenberg
@Ricardo: Yes, that was my intent with the original report. I didn't even know about the other issue when I submitted this issue. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to bash in Ubuntu. https://bugs.launchpad.net/bugs/

[Touch-packages] [Bug 1803441] Re: BASH_CMDS is writable in restricted bash shells (fixed upstream, need to backport patch)

2019-03-26 Thread Andrew Zonenberg
Yes, that's basically the same issue. It was patched upstream many years ago (2016 I recall) however as of last fall Ubuntu old-LTS had not backported the fix. I used this bug to escape from rbash during a security audit of a fully patched Ubuntu system in October. -- You received this bug notif

[Touch-packages] [Bug 1803441] Re: BASH_CMDS is writable in restricted bash shells (fixed upstream, need to backport patch)

2019-03-21 Thread Andrew Zonenberg
I have not seen a CVE for the original upstream bug but cannot say with certainty none was assigned. The Ubuntu packaging issue definitely does not have one. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to bash in Ubuntu. htt