MGASA-2017-0005

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2017-0005.html

Import Source

https://advisories.mageia.org/MGASA-2017-0005.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2017-0005

Related

CVE-2016-9401

Published

2017-01-06T08:28:18Z

Modified

2017-01-06T08:15:36Z

Summary

Updated bash packages fix security vulnerability

Details

In Bash, the popd command can be tricked to free a user supplied address, which could be used to bypass restricted shells (rsh) on some environments to cause use-after-free (CVE-2016-9401).

References

https://advisories.mageia.org/MGASA-2017-0005.html
https://bugs.mageia.org/show_bug.cgi?id=19808
http://openwall.com/lists/oss-security/2016/11/17/9
https://security.gentoo.org/glsa/201701-02

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:5 / bash

Package

Name: bash
Purl: pkg:rpm/mageia/bash?distro=mageia-5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.3-48.2.1.mga5

Ecosystem specific

{
    "section": "core"
}