The valid_parameter_transform function is only present since bash version 5.1.

SUSE:SLE-11-SP3:Update  bash-3.2
SUSE:SLE-12-SP2:Update  bash-4.3
SUSE:SLE-15:Update      bash-4.4
SUSE:SLE-15-SP3:Update  bash-4.4
SUSE:SLE-15-SP4:Update  bash-4.4

And it looks like Factory has already the fix in question.

openSUSE:Factory        bash-5.2


Possible upstream fix:

--- a/subst.c
+++ b/subst.c
@@ -8660,7 +8660,7 @@ parameter_brace_transform (varname, value, estatep, xform, rtype, quoted, pflags
       return ((char *)NULL);
     }
 
-  if (valid_parameter_transform (xform) == 0)
+  if (xform[0] == 0 || valid_parameter_transform (xform) == 0)
     {
       this_command_name = oname;
       if (vtype == VT_VARIABLE)

(In reply to Alexander Bergmann from comment #0)
> rh#2126720
> 
> A heap-buffer-overflow in valid_parameter_transform function.
> 
> References:
> https://bugzilla.redhat.com/show_bug.cgi?id=2126720
> http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-3715

Both links are not readable

(In reply to Alexander Bergmann from comment #1)
> The valid_parameter_transform function is only present since bash version
> 5.1.
> 
> SUSE:SLE-11-SP3:Update  bash-3.2
> SUSE:SLE-12-SP2:Update  bash-4.3
> SUSE:SLE-15:Update      bash-4.4
> SUSE:SLE-15-SP3:Update  bash-4.4
> SUSE:SLE-15-SP4:Update  bash-4.4


 bash/Updates> find -name subst.c
 ./SLE-12/bash-4.2/subst.c
 ./SLE-11-SP4/bash-3.2/subst.c
 ./SLE-12-SP2/bash-4.3/subst.c
 ./SLE-12-SP2/bash-4.3.sjis/subst.c
 ./SLE-11-SP4.testout/bash-3.2/subst.c
 ./SLE-15/bash-4.4/subst.c
 bash/Updates> find -name subst.c -exec grep valid_parameter_transform '{}' \+
 bash/Updates> 

> 
> And it looks like Factory has already the fix in question.
> 
> openSUSE:Factory        bash-5.2
> 
> 
> Possible upstream fix:
> 
> --- a/subst.c
> +++ b/subst.c
> @@ -8660,7 +8660,7 @@ parameter_brace_transform (varname, value, estatep,
> xform, rtype, quoted, pflags
>        return ((char *)NULL);
>      }
>  
> -  if (valid_parameter_transform (xform) == 0)
> +  if (xform[0] == 0 || valid_parameter_transform (xform) == 0)
>      {
>        this_command_name = oname;
>        if (vtype == VT_VARIABLE)

You might close this bug as we do not have bash 5.1 anymore on openSUSE:Factory

Closed as fixed.