Red Hat Product Errata RHBA-2018:0511 - Bug Fix Advisory
Issued:
2018-03-13
Updated:
2018-03-13

RHBA-2018:0511 - Bug Fix Advisory

Synopsis

ksh bug fix update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated ksh packages that fix one bug are now available for Red Hat Enterprise Linux 6.

Description

KornShell (ksh) is a Unix shell developed by AT&T Bell Laboratories, which is backward-compatible with the Bourne shell (sh) and includes many features of the C shell. The most recent version is KSH-93. KornShell complies with the POSIX.2 standard (IEEE Std 1003.2-1992).

This update fixes the following bug:

  • Due to an out-of-bounds write in the xec.c:iousepipe() function, a random memory corruption occurred. As a consequence, the ksh shell terminated unexpectedly. This update fixes the memory corruption, and ksh no longer crashes in the aforementioned scenario. (BZ#1536977)

Users of ksh are advised to upgrade to these updated packages, which fix this bug.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 6 x86_64
  • Red Hat Enterprise Linux Server 6 i386
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
  • Red Hat Enterprise Linux Workstation 6 x86_64
  • Red Hat Enterprise Linux Workstation 6 i386
  • Red Hat Enterprise Linux Desktop 6 x86_64
  • Red Hat Enterprise Linux Desktop 6 i386
  • Red Hat Enterprise Linux for IBM z Systems 6 s390x
  • Red Hat Enterprise Linux for Power, big endian 6 ppc64
  • Red Hat Enterprise Linux for Scientific Computing 6 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

  • BZ - 1536977 - Possible out of bounds write in xec.c:iousepipe [rhel-6.9.z]

CVEs

(none)

References

(none)

Red Hat Enterprise Linux Server 6

SRPM
ksh-20120801-37.el6_9.src.rpm SHA-256: 2cebf23b9fe4a0a8e7bf984f5b36ac6bd7dff2809075ef6f411a8cf5df5f5728
x86_64
ksh-20120801-37.el6_9.x86_64.rpm SHA-256: 3e0b1c5bfff970eb02f3b947fa32130cb477deba8018035b6cc60a0034f825ff
ksh-20120801-37.el6_9.x86_64.rpm SHA-256: 3e0b1c5bfff970eb02f3b947fa32130cb477deba8018035b6cc60a0034f825ff
ksh-debuginfo-20120801-37.el6_9.x86_64.rpm SHA-256: e5415919ecb05af92bd8d99f77e73487198e9eb323ea0b3f6dc0566ee901a5d7
ksh-debuginfo-20120801-37.el6_9.x86_64.rpm SHA-256: e5415919ecb05af92bd8d99f77e73487198e9eb323ea0b3f6dc0566ee901a5d7
i386
ksh-20120801-37.el6_9.i686.rpm SHA-256: b1335a4b37d5b7d7e0e60c945d1cb4ca71b2e664db9054415a8e7bdf8afe860b
ksh-debuginfo-20120801-37.el6_9.i686.rpm SHA-256: 03c0e57b09da90fbd78090cb5bbb859f6d843eb08b28da56f438633c8e133f2c

Red Hat Enterprise Linux Server - Extended Life Cycle Support 6

SRPM
ksh-20120801-37.el6_9.src.rpm SHA-256: 2cebf23b9fe4a0a8e7bf984f5b36ac6bd7dff2809075ef6f411a8cf5df5f5728
x86_64
ksh-20120801-37.el6_9.x86_64.rpm SHA-256: 3e0b1c5bfff970eb02f3b947fa32130cb477deba8018035b6cc60a0034f825ff
ksh-debuginfo-20120801-37.el6_9.x86_64.rpm SHA-256: e5415919ecb05af92bd8d99f77e73487198e9eb323ea0b3f6dc0566ee901a5d7
i386
ksh-20120801-37.el6_9.i686.rpm SHA-256: b1335a4b37d5b7d7e0e60c945d1cb4ca71b2e664db9054415a8e7bdf8afe860b
ksh-debuginfo-20120801-37.el6_9.i686.rpm SHA-256: 03c0e57b09da90fbd78090cb5bbb859f6d843eb08b28da56f438633c8e133f2c

Red Hat Enterprise Linux Workstation 6

SRPM
ksh-20120801-37.el6_9.src.rpm SHA-256: 2cebf23b9fe4a0a8e7bf984f5b36ac6bd7dff2809075ef6f411a8cf5df5f5728
x86_64
ksh-20120801-37.el6_9.x86_64.rpm SHA-256: 3e0b1c5bfff970eb02f3b947fa32130cb477deba8018035b6cc60a0034f825ff
ksh-debuginfo-20120801-37.el6_9.x86_64.rpm SHA-256: e5415919ecb05af92bd8d99f77e73487198e9eb323ea0b3f6dc0566ee901a5d7
i386
ksh-20120801-37.el6_9.i686.rpm SHA-256: b1335a4b37d5b7d7e0e60c945d1cb4ca71b2e664db9054415a8e7bdf8afe860b
ksh-debuginfo-20120801-37.el6_9.i686.rpm SHA-256: 03c0e57b09da90fbd78090cb5bbb859f6d843eb08b28da56f438633c8e133f2c

Red Hat Enterprise Linux Desktop 6

SRPM
ksh-20120801-37.el6_9.src.rpm SHA-256: 2cebf23b9fe4a0a8e7bf984f5b36ac6bd7dff2809075ef6f411a8cf5df5f5728
x86_64
ksh-20120801-37.el6_9.x86_64.rpm SHA-256: 3e0b1c5bfff970eb02f3b947fa32130cb477deba8018035b6cc60a0034f825ff
ksh-debuginfo-20120801-37.el6_9.x86_64.rpm SHA-256: e5415919ecb05af92bd8d99f77e73487198e9eb323ea0b3f6dc0566ee901a5d7
i386
ksh-20120801-37.el6_9.i686.rpm SHA-256: b1335a4b37d5b7d7e0e60c945d1cb4ca71b2e664db9054415a8e7bdf8afe860b
ksh-debuginfo-20120801-37.el6_9.i686.rpm SHA-256: 03c0e57b09da90fbd78090cb5bbb859f6d843eb08b28da56f438633c8e133f2c

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
ksh-20120801-37.el6_9.src.rpm SHA-256: 2cebf23b9fe4a0a8e7bf984f5b36ac6bd7dff2809075ef6f411a8cf5df5f5728
s390x
ksh-20120801-37.el6_9.s390x.rpm SHA-256: e6b772b86acde0ef6a16a58f6378e584f28f185bcb5bf2b821125a085e98b849
ksh-debuginfo-20120801-37.el6_9.s390x.rpm SHA-256: 801f9d9814922965686e67da11c75cb08e13ba6793f582bc1a1e187306b0b406

Red Hat Enterprise Linux for Power, big endian 6

SRPM
ksh-20120801-37.el6_9.src.rpm SHA-256: 2cebf23b9fe4a0a8e7bf984f5b36ac6bd7dff2809075ef6f411a8cf5df5f5728
ppc64
ksh-20120801-37.el6_9.ppc64.rpm SHA-256: e0017456de1d4da078af4d21887a28e07311fc898f01436225b623db20a4bd16
ksh-debuginfo-20120801-37.el6_9.ppc64.rpm SHA-256: 1293b20ec951fdcdee538f3d1b3a26e46d97e2bf47d3c97f2b7882b705abe48d

Red Hat Enterprise Linux for Scientific Computing 6

SRPM
ksh-20120801-37.el6_9.src.rpm SHA-256: 2cebf23b9fe4a0a8e7bf984f5b36ac6bd7dff2809075ef6f411a8cf5df5f5728
x86_64
ksh-20120801-37.el6_9.x86_64.rpm SHA-256: 3e0b1c5bfff970eb02f3b947fa32130cb477deba8018035b6cc60a0034f825ff
ksh-debuginfo-20120801-37.el6_9.x86_64.rpm SHA-256: e5415919ecb05af92bd8d99f77e73487198e9eb323ea0b3f6dc0566ee901a5d7

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6

SRPM
ksh-20120801-37.el6_9.src.rpm SHA-256: 2cebf23b9fe4a0a8e7bf984f5b36ac6bd7dff2809075ef6f411a8cf5df5f5728
s390x
ksh-20120801-37.el6_9.s390x.rpm SHA-256: e6b772b86acde0ef6a16a58f6378e584f28f185bcb5bf2b821125a085e98b849
ksh-debuginfo-20120801-37.el6_9.s390x.rpm SHA-256: 801f9d9814922965686e67da11c75cb08e13ba6793f582bc1a1e187306b0b406

Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6

SRPM
ksh-20120801-37.el6_9.src.rpm SHA-256: 2cebf23b9fe4a0a8e7bf984f5b36ac6bd7dff2809075ef6f411a8cf5df5f5728
x86_64
ksh-20120801-37.el6_9.x86_64.rpm SHA-256: 3e0b1c5bfff970eb02f3b947fa32130cb477deba8018035b6cc60a0034f825ff
ksh-debuginfo-20120801-37.el6_9.x86_64.rpm SHA-256: e5415919ecb05af92bd8d99f77e73487198e9eb323ea0b3f6dc0566ee901a5d7
i386
ksh-20120801-37.el6_9.i686.rpm SHA-256: b1335a4b37d5b7d7e0e60c945d1cb4ca71b2e664db9054415a8e7bdf8afe860b
ksh-debuginfo-20120801-37.el6_9.i686.rpm SHA-256: 03c0e57b09da90fbd78090cb5bbb859f6d843eb08b28da56f438633c8e133f2c

Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6

SRPM
ksh-20120801-37.el6_9.src.rpm SHA-256: 2cebf23b9fe4a0a8e7bf984f5b36ac6bd7dff2809075ef6f411a8cf5df5f5728
s390x
ksh-20120801-37.el6_9.s390x.rpm SHA-256: e6b772b86acde0ef6a16a58f6378e584f28f185bcb5bf2b821125a085e98b849
ksh-debuginfo-20120801-37.el6_9.s390x.rpm SHA-256: 801f9d9814922965686e67da11c75cb08e13ba6793f582bc1a1e187306b0b406

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.