File _patchinfo of Package patchinfo

<patchinfo incident="5763">
  <issue id="1001299" tracker="bnc">VUL-1: CVE-2016-7543: bash SHELLOPTS+PS4</issue>
  <issue id="976776" tracker="bnc">su segmentation fault (core dumped)</issue>
  <issue id="1000396" tracker="bnc">VUL-1: CVE-2016-0634: bash: Arbitrary code execution via malicious hostname</issue>
  <issue id="2016-0634" tracker="cve" />
  <issue id="2016-7543" tracker="cve" />
  <category>security</category>
  <rating>moderate</rating>
  <packager>WernerFink</packager>
  <description>This update for bash fixes the following security issues:

- CVE-2016-7543: Local attackers could have executed arbitrary commands via specially crafted SHELLOPTS+PS4 variables (bsc#1001299)
- CVE-2016-0634: Malicious hostnames could have allowed arbitrary command execution when $HOSTNAME was expanded in the prompt (bsc#1000396)

This update also fixes the following bugs:

- fix a crash found during debugging boo#971410
- boo#976776: crash if ~/.bash_history is empty (boo#976776)
</description>
  <summary>Security update for bash</summary>
</patchinfo>