bash (4.3-11+deb8u1) jessie; urgency=medium * Non-maintainer upload. * CVE-2016-0634: Arbitrary code execution via malicious hostname * CVE-2016-7543: Specially crafted SHELLOPTS+PS4 variables allows command substitution -- Salvatore Bonaccorso <email address hidden> Sun, 09 Oct 2016 17:35:21 +0200