tocsin

Debian/bash: high 8.8

GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary commands via a crafted environme

Action: Upgrade bash to 4.3-9.2 or later.

Affected

introducedfixedlast affected
04.3-9.2-

Fixed versions

4.3-9.2

Sources

published · modified · JSON