advisories/24751.adv

type: security
subject: Updated bash packages fix security vulnerability
CVE:
 - CVE-2019-9924
src:
  6:
   core:
     - bash-4.3-48.4.mga6
description: |
  Updated bash package fixes security vulnerability:

  A vulnerability in which shell did not prevent user BASH_CMDS, allowing
  the user to execute any command with the permissions of the shell
  (CVE-2019-9924).
references:
 - https://bugs.mageia.org/show_bug.cgi?id=24751
 - https://lists.opensuse.org/opensuse-updates/2019-04/msg00093.html
ID: MGASA-2019-0163
1	type: security
2	subject: Updated bash packages fix security vulnerability
3	CVE:
4	- CVE-2019-9924
5	src:
6	6:
7	core:
8	- bash-4.3-48.4.mga6
9	description: \|
10	Updated bash package fixes security vulnerability:
11
12	A vulnerability in which shell did not prevent user BASH_CMDS, allowing
13	the user to execute any command with the permissions of the shell
14	(CVE-2019-9924).
15	references:
16	- https://bugs.mageia.org/show_bug.cgi?id=24751
17	- https://lists.opensuse.org/opensuse-updates/2019-04/msg00093.html
18	ID: MGASA-2019-0163