Skip to content
OpenAdvisories
Medium DLA-1726-1 2 CVEs

bash - security update

Published Mar 25, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 bash 4.3-11+deb8u2

Vulnerabilities 2

  • Medium 6.2
    CVE-2016-9401

    popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address.

    bash bash bash Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-9924

    rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execu…

    bash bash Debian Ubuntu