tocsin

Debian/ksh: high 7.8

In ksh version 20120801, a flaw was found in the way it evaluates certain environment variables. An attacker could use this flaw to override or bypass environment restrictions to execute shell command

Action: Upgrade ksh to 2020.0.0-2.1 or later.

Affected

introducedfixedlast affected
02020.0.0-2.1-

Fixed versions

2020.0.0-2.1

Sources

published · modified · JSON