ksh Bug Fix and Enhancement Update

ksh Updated 02 Oct 2025

Summary

28/04/2020
N/A
Yes i
Unrated
Not published

ALBA-2020:1751: ksh bug fix and enhancement update. Affects ksh versions < 20120801-254.el8. Fixed in 20120801-254.el8. How to fix ↓

Free scan

Check if this vulnerability affects your application

Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.

Check my app free

No signup required · Results in about 60 seconds

Upload your dependency manifest or SBOM

Drag & drop your file here or

Java Javascript PHP Python Go Rust Ruby Dart C/C++ Elixir CycloneDX SPDX

Upload a supported dependency manifest or SBOM. No installation or source-code access required.

See supported files and SBOM formats
SBOM sbom.json · bom.json · bom.xml · *.spdx.json · *.cdx.json · *.cdx.xml
Java pom.xml · gradle.lockfile · buildscript-gradle.lockfile
Javascript package-lock.json · yarn.lock · pnpm-lock.yaml
PHP composer.lock
Python poetry.lock · requirements.txt · Pipfile.lock
Go go.mod
Rust Cargo.lock
Ruby Gemfile.lock
Dart pubspec.lock
C/C++ conan.lock
Elixir mix.lock
Enter your work email to receive your report link.

Verify your email to view the full report and start 30 days of continuous monitoring. No credit card required.

Sponsored Devnack Penetration testing for web, API and mobile Manual testing by engineers who build software, not an auditor's checklist. Trusted by teams at Swift and Google Talk to Devnack

Background

The ksh package is a shell program that provides a command language for executing commands and scripts. It is commonly used as the default shell on Unix-like systems. This package is specifically designed for AlmaLinux 8. The ksh package has been updated to address various bugs and introduce enhancements.

Vulnerability Detail

The vulnerability addressed in this update is not explicitly mentioned in the provided information. However, it is recommended to refer to the AlmaLinux Release Notes for detailed information on the changes included in this update. The vulnerability could potentially have security implications and may impact the stability or functionality of the ksh package.

How To Fix

Minimum fixed version

20120801-254.el8

This is the first release that contains the fix.

sudo dnf update ksh

Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →

Workaround

No specific workaround is mentioned in the provided information. It is recommended to apply the package update as the primary solution.

Conclusion

The ksh package has been updated to address various bugs and introduce enhancements. It is recommended to update the package to the fixed version to ensure the security and stability of the system. For further support on vulnerability remediation, you can reach out to DevNack.com.

See every vulnerability recorded for ksh →

Share this vulnerability

FAQ

The ksh package is a shell program that provides a command language for executing commands and scripts. It is commonly used as the default shell on Unix-like systems.

The impact of the vulnerability is not explicitly mentioned. It is recommended to refer to the AlmaLinux Release Notes for detailed information on the changes included in this update.

To fix the vulnerability, it is advised to update the ksh package to the fixed version 20120801-254.el8. This can be done by following the package update process specific to AlmaLinux 8.

No specific workaround is mentioned in the provided information. It is recommended to apply the package update as the primary solution.

For more information about the vulnerability, it is recommended to refer to the AlmaLinux Release Notes linked from the References section of the provided information.

Related vulnerabilities

Recent vulnerabilities recorded for ksh.

How To Fix

Minimum fixed version

20120801-254.el8

This is the first release that contains the fix.

sudo dnf update ksh

Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →
Help improve this record
Report an issue or send feedback