Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-7549: In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p. 1549858: CVE-2018-7549 zsh: crash on copying empty hash table CVE-2018-7548: In subst.c in zsh through 5.4.2, there is a NULL pointer dereference when using ${(PA)...} on an empty array result. 1549841: CVE-2018-7548 zsh: null-pointer deref when using ${(PA)...} on an empty array result CVE-2017-18206: In utils.c in zsh before 5.4, symlink expansion had a buffer overflow. 1549861: CVE-2017-18206 zsh: buffer overrun in xsymlinks CVE-2017-18205: In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL pointer dereference during processing of the cd command with no argument if HOME is not set. 1549862: CVE-2017-18205 zsh: NULL dereference in cd in sh compatibility mode under given circumstances
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | zsh | 0:5.3.1-7.amzn2 |
| Amazon Linux · 2 | zsh-debuginfo | 0:5.3.1-7.amzn2 |
| Amazon Linux · 2 | zsh-html | 0:5.3.1-7.amzn2 |
Vulnerabilities 4
-
Unscored —
In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL pointer dereference during processi…
-
Unscored —
In utils.c in zsh before 5.4, symlink expansion had a buffer overflow.
-
Unscored —
In subst.c in zsh through 5.4.2, there is a NULL pointer dereference when using ${(PA)...} on an empty array result.
-
Unscored —
In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p.