title: Red Hat Security Advisory: ksh security update
description: ksh: certain environment variables interpreted as arithmetic expressions on startup, leading to code injection
cpes: cpe:/o:redhat:enterprise_linux:7::client cpe:/o:redhat:enterprise_linux:7::computenode cpe:/o:redhat:enterprise_linux:7::server cpe:/o:redhat:enterprise_linux:7::workstation