Debian/ksh: high 7.8
In ksh version 20120801, a flaw was found in the way it evaluates certain environment variables. An attacker could use this flaw to override or bypass environment restrictions to execute shell command
Action: Upgrade ksh to 2020.0.0-2.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2020.0.0-2.1 | - |
Fixed versions
| 2020.0.0-2.1 |
Sources
published · modified · JSON