Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Scientific Linux SL6: SLSA-2020-0515-1 Important Ksh Code Injection Fix

Scientific Large Esm H500
ksh: certain environment variables interpreted as arithmetic expressions on startup, leading to code injection (CVE-2019-14868) SL6 x86_64 ksh-20120801-38.el6_10.x86_64.rpm ksh-debuginfo-20120801-38.el6_10.x86_64.rpm i386 ksh-20120801-38.el6_10.i686.rpm ksh-debuginfo-20120801-38.el6_10.i686.rpm - Scientific Linux Development Team
Synopsis:          Important: ksh security update
Advisory ID:       SLSA-2020:0515-1
Issue Date:        2020-02-17
CVE Numbers:       None
--

Security Fix(es):

* ksh: certain environment variables interpreted as arithmetic expressions
on startup, leading to code injection (CVE-2019-14868)
--

SL6
  x86_64
    ksh-20120801-38.el6_10.x86_64.rpm
    ksh-debuginfo-20120801-38.el6_10.x86_64.rpm
  i386
    ksh-20120801-38.el6_10.i686.rpm
    ksh-debuginfo-20120801-38.el6_10.i686.rpm

- Scientific Linux Development Team

Related News

Your message here