svn commit: r525497 - head/shells/ksh93
Cy Schubert
cy at FreeBSD.org
Fri Feb 7 19:38:24 UTC 2020
Author: cy
Date: Fri Feb 7 19:38:23 2020
New Revision: 525497
URL: https://svnweb.freebsd.org/changeset/ports/525497
Log:
Fix CVE-2019-14868: certain environment variables interpreted as
arithmetic expressions on startup, leading to code injection.
Submitted by: Siteshwar Vashisht <svashisht at redhat.com>
Reported by: Marian Rehak
MFH: 2020Q1
Security: CVE-2019-14868
https://bugzilla.redhat.com/show_bug.cgi?id=1757324
https://access.redhat.com/security/cve/CVE-2019-14868
Modified:
head/shells/ksh93/Makefile (contents, props changed)
Modified: head/shells/ksh93/Makefile
==============================================================================
--- head/shells/ksh93/Makefile Fri Feb 7 19:15:48 2020 (r525496)
+++ head/shells/ksh93/Makefile Fri Feb 7 19:38:23 2020 (r525497)
@@ -2,6 +2,7 @@
PORTNAME= ksh93
DISTVERSION= 2020.0.1
+PORTREVISION= 1
PORTEPOCH= 1
CATEGORIES= shells
More information about the svn-ports-head
mailing list