{"id":"CLSA-2025-1761326171","summary":"Fix CVE(s): CVE-2019-18276","details":"   * SECURITY UPDATE: privilege escalation vulnerability in privileged mode\n     - debian/patches/CVE-2019-18276.patch: fix setuid/setgid handling\n       when bash is running in privileged mode, use setresuid/setresgid\n       over setuid/setgid when available\n     - CVE-2019-18276","modified":"2026-06-04T09:45:05.683443683Z","published":"2025-10-24T17:16:15Z","upstream":["CVE-2019-18276"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2025-1761326171.html"}],"affected":[{"package":{"name":"bash","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/bash?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0-4+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761326171.json"}},{"package":{"name":"bash-builtins","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/bash-builtins?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0-4+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761326171.json"}},{"package":{"name":"bash-doc","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/bash-doc?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0-4+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761326171.json"}},{"package":{"name":"bash-static","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/bash-static?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0-4+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761326171.json"}}],"schema_version":"1.7.5"}