Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 543
Alerts This Week
Warning Icon 1 543

Debian 8: DLA-1726-1 Moderate: Bash Segfault And Command Issue

debian lts
Calendar Grey March 25, 2019
Dist Debian Esm H88
Package : bash Version : 4.3-11+deb8u2 CVE ID : CVE-2016-9401 CVE-2019-9924 Two issues have been fix
Two issues have been fixed in bash, the GNU Bourne-Again Shell: CVE-2016-9401
Topics%20covered

Topics Covered

security advisory debian package update software fix segfault bash restricted mode

Summary

The popd builtin segfaulted when called with negative out of range
offsets.

CVE-2019-9924

Sylvain Beucler discovered that it was possible to call commands
that contained a slash when in restricted mode (rbash) by adding
them to the BASH_CMDS array.

For Debian 8 "Jessie", these problems have been fixed in version
4.3-11+deb8u2.

We recommend that you upgrade your bash packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Package: bash
Version: 4.3-11+deb8u2
CVE ID: CVE-2016-9401 CVE-2019-9924

Topics%20covered

Topics Covered

security advisory debian package update software fix segfault bash restricted mode

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.