Most recent entries from all

ALSA-2022:2120 — Moderate: zsh security update

Affected: AlmaLinux:8: zsh, AlmaLinux:8: zsh-html

The zsh shell is a command interpreter usable as an interactive login shell and as a shell script command processor. Zsh resembles the ksh shell (the Korn shell), but includes many enhancements. Zsh supports command-line editing, built-in spelling correction, programmable command completion, shell functions (with autoloading), a history mechanism, and more.

Security Fix(es):

* zsh: Prompt expansion vulnerability (CVE-2021-45444)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2022-01068

certfr-2022-avi-466 — De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaqu…

certfr-2022-avi-466

EUVD-2026-33284

fkie_cve-2021-45444

In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument. This occurs because of recursive PROMPT_SUBST expansion.

GHSA-735j-r9q6-48mw

gsd-2021-45444

msrc_CVE-2021-45444 — In zsh before 5.8.1 an attacker can achieve code execution if they control a command output inside the prompt as demons…

msrc_CVE-2021-45444

OESA-2022-1567 — zsh security update

Affected: openEuler:20.03-LTS-SP1: zsh, openEuler:20.03-LTS-SP2: zsh, openEuler:20.03-LTS-SP3: zsh

The zsh is a shell designed for interactive use, and it is also a powerful scripting language. Many of the useful features of bash, ksh, and tcsh were incorporated into zsh. It can match files by file extension without running an external program, share command history with any shell, and more. Security Fix(es): In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument. This occurs because of recursive PROMPT_SUBST expansion.(CVE-2021-45444)

openSUSE-SU-2022:0735-1 — Security update for zsh

Security update for zsh

SUSE-SU-2022:0732-1 — Security update for zsh

Security update for zsh

UBUNTU-CVE-2021-45444

Affected: Ubuntu:Pro:16.04:LTS: zsh, Ubuntu:18.04:LTS: zsh, Ubuntu:20.04:LTS: zsh, Ubuntu:22.04:LTS: zsh

WID-SEC-W-2022-0795 — zsh: Schwachstelle ermöglicht Codeausführung

Ein lokaler Angreifer kann eine Schwachstelle in zsh ausnutzen, um beliebigen Programmcode auszuführen.