CVE-2019-14868

CVE-2019-14868 affects ksh (version 20120801). A flaw in how environment variables are evaluated lets an attacker override or bypass environment restrictions to execute shell commands. Public advisories (Debian, Mageia, CentOS, Fedora) confirm a fix in respective distros; patched releases mitigat...