https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 08:18:30 +0000 https://cve.radiocsirt.org/vuln/alsa-2020:0903 <p><strong>Affected:</strong> AlmaLinux:8: zsh-html</p> <p>The zsh shell is a command interpreter usable as an interactive login shell and as a shell script command processor. Zsh resembles the ksh shell (the Korn shell), but includes many enhancements. Zsh supports command-line editing, built-in spelling correction, programmable command completion, shell functions (with autoloading), a history mechanism, and more.</p> <p>Security Fix(es):</p> <p>* zsh: insecure dropping of privileges when unsetting PRIVILEGED option (CVE-2019-20044)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: zsh-html</p> <p>The zsh shell is a command interpreter usable as an interactive login shell and as a shell script command processor. Zsh resembles the ksh shell (the Korn shell), but includes many enhancements. Zsh supports command-line editing, built-in spelling correction, programmable command completion, shell functions (with autoloading), a history mechanism, and more.</p> <p>Security Fix(es):</p> <p>* zsh: insecure dropping of privileges when unsetting PRIVILEGED option (CVE-2019-20044)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2020:0903 https://cve.radiocsirt.org/vuln/bdu:2021-01493 bdu:2021-01493 https://cve.radiocsirt.org/vuln/bdu:2021-01493 https://cve.radiocsirt.org/vuln/certfr-2020-avi-321 certfr-2020-avi-321 https://cve.radiocsirt.org/vuln/certfr-2020-avi-321 https://cve.radiocsirt.org/vuln/cnvd-2020-50123 cnvd-2020-50123 https://cve.radiocsirt.org/vuln/cnvd-2020-50123 https://cve.radiocsirt.org/vuln/euvd-2026-59718 EUVD-2026-59718 https://cve.radiocsirt.org/vuln/euvd-2026-59718 https://cve.radiocsirt.org/vuln/fkie_cve-2019-20044 <p>In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULE_PATH=/dir/with/module zmodload with a module that calls setuid().</p> <p>In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULE_PATH=/dir/with/module zmodload with a module that calls setuid().</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-20044 https://cve.radiocsirt.org/vuln/ghsa-gwf9-995r-26hx <p>In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULE_PATH=/dir/with/module zmodload with a module that calls setuid().</p> <p>In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULE_PATH=/dir/with/module zmodload with a module that calls setuid().</p> https://cve.radiocsirt.org/vuln/ghsa-gwf9-995r-26hx https://cve.radiocsirt.org/vuln/gsd-2019-20044 gsd-2019-20044 https://cve.radiocsirt.org/vuln/gsd-2019-20044 https://cve.radiocsirt.org/vuln/opensuse-su-2022:0735-1 <p>Security update for zsh</p> <p>Security update for zsh</p> https://cve.radiocsirt.org/vuln/opensuse-su-2022:0735-1 https://cve.radiocsirt.org/vuln/rhsa-2020:0892 <p>zsh: insecure dropping of privileges when unsetting PRIVILEGED option</p> <p>zsh: insecure dropping of privileges when unsetting PRIVILEGED option</p> https://cve.radiocsirt.org/vuln/rhsa-2020:0892 https://cve.radiocsirt.org/vuln/suse-su-2022:0732-1 <p>Security update for zsh</p> <p>Security update for zsh</p> https://cve.radiocsirt.org/vuln/suse-su-2022:0732-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-20044 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: zsh, Ubuntu:18.04:LTS: zsh, Ubuntu:22.04:LTS: zsh</p> <p>In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULE_PATH=/dir/with/module zmodload with a module that calls setuid().</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: zsh, Ubuntu:18.04:LTS: zsh, Ubuntu:22.04:LTS: zsh</p> <p>In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULE_PATH=/dir/with/module zmodload with a module that calls setuid().</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-20044