Ubuntu
bash package

  1. Bug #1803441
  2. Comment #8

Comment 8 for bug 1803441

Revision history for this message
Riccardo Schirone (rschiron) wrote :

After looking a bit more into this, it seems the issue in https://lists.gnu.org/archive/html/bug-bash/2017-12/msg00065.html is maybe not a real security concern, since rbash was wrongly configured. Having . in PATH is not good with rbash and that makes the whole thing flawed. So, we could say CVE-2019-9924 is just for the issue in https://lists.gnu.org/archive/html/bug-bash/2017-03/msg00077.html .