Skip to content
OpenAdvisories
Medium ALSA-2023:0340 1 CVE

Moderate: bash security update

Published Jan 23, 2023 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The bash packages provide Bash (Bourne-again shell), which is the default shell for AlmaLinux.

Security Fix(es):

* bash: a heap-buffer-overflow in valid_parameter_transform (CVE-2022-3715)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 2

ReleasePackageFixed in
AlmaLinux · 9 bash 5.1.8-6.el9_1
AlmaLinux · 9 bash-devel 5.1.8-6.el9_1

Vulnerabilities 1

  • High 7.8
    CVE-2022-3715

    A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue m…

    bash bash Debian Ubuntu

References

  • report
    https://access.redhat.com/security/cve/CVE-2022-3715
  • report
    https://bugzilla.redhat.com/2126720
  • advisory
    https://errata.almalinux.org/9/ALSA-2023-0340.html