RHBA-2018:0511 - Bug Fix Advisory

Topic

Updated ksh packages that fix one bug are now available for Red Hat Enterprise Linux 6.

Description

KornShell (ksh) is a Unix shell developed by AT&T Bell Laboratories, which is backward-compatible with the Bourne shell (sh) and includes many features of the C shell. The most recent version is KSH-93. KornShell complies with the POSIX.2 standard (IEEE Std 1003.2-1992).

This update fixes the following bug:

• Due to an out-of-bounds write in the xec.c:iousepipe() function, a random memory corruption occurred. As a consequence, the ksh shell terminated unexpectedly. This update fixes the memory corruption, and ksh no longer crashes in the aforementioned scenario. (BZ#1536977)

Users of ksh are advised to upgrade to these updated packages, which fix this bug.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x

Fixes

• BZ - 1536977 - Possible out of bounds write in xec.c:iousepipe [rhel-6.9.z]

CVEs

(none)

References

(none)