SUSE-SU-2017:1317-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2017/suse-su-20171317-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2017:1317-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2017:1317-1
Related
Published
2017-05-16T13:41:26Z
Modified
2017-05-16T13:41:26Z
Summary
Security update for bash
Details

This update for bash fixes an issue that could lead to syntax errors when parsing scripts that use expr(1) inside loops.

Additionally, the popd build-in now ensures that the normalized stack offset is within bounds before trying to free that stack entry. This fixes a segmentation fault.

References

Affected packages

SUSE:Linux Enterprise Desktop 12 SP2 / bash

Package

Name
bash
Purl
purl:rpm/suse/bash&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.3-82.1

Ecosystem specific 

{
    "binaries": [
        {
            "libreadline6-32bit": "6.3-82.1",
            "bash-lang": "4.3-82.1",
            "bash": "4.3-82.1",
            "readline-doc": "6.3-82.1",
            "bash-doc": "4.3-82.1",
            "libreadline6": "6.3-82.1"
        }
    ]
}

SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 / bash

Package

Name
bash
Purl
purl:rpm/suse/bash&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.3-82.1

Ecosystem specific 

{
    "binaries": [
        {
            "libreadline6": "6.3-82.1",
            "bash": "4.3-82.1",
            "readline-doc": "6.3-82.1",
            "bash-doc": "4.3-82.1"
        }
    ]
}

SUSE:Linux Enterprise Software Development Kit 12 SP2 / bash

Package

Name
bash
Purl
purl:rpm/suse/bash&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.3-82.1

Ecosystem specific 

{
    "binaries": [
        {
            "bash-devel": "4.3-82.1",
            "readline-devel": "6.3-82.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP2 / bash

Package

Name
bash
Purl
purl:rpm/suse/bash&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.3-82.1

Ecosystem specific 

{
    "binaries": [
        {
            "libreadline6-32bit": "6.3-82.1",
            "libreadline6": "6.3-82.1",
            "bash": "4.3-82.1",
            "readline-doc": "6.3-82.1",
            "bash-doc": "4.3-82.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP2 / bash

Package

Name
bash
Purl
purl:rpm/suse/bash&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.3-82.1

Ecosystem specific 

{
    "binaries": [
        {
            "libreadline6-32bit": "6.3-82.1",
            "libreadline6": "6.3-82.1",
            "bash": "4.3-82.1",
            "readline-doc": "6.3-82.1",
            "bash-doc": "4.3-82.1"
        }
    ]
}

SUSE:Linux Enterprise Workstation Extension 12 SP2 / bash

Package

Name
bash
Purl
purl:rpm/suse/bash&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.3-82.1

Ecosystem specific 

{
    "binaries": [
        {
            "bash-lang": "4.3-82.1"
        }
    ]
}