Stephane Chazelas discovered that Bash incorrectly handled trailing code in function definitions. An attacker could use this issue to bypass environment restrictions, such as SSH forced command environments.
{ "availability": "No subscription required", "binaries": [ { "bash-builtins": "4.3-7ubuntu1.1", "bash": "4.3-7ubuntu1.1", "bash-doc": "4.3-7ubuntu1.1", "bash-static": "4.3-7ubuntu1.1" } ] }