Summary
[5.5.1-9]
- do not perform PROMPT_SUBST evaluation on file.file/%K arguments (CVE-2021-45444)
[5.5.1-8]
- improve printing of error messages introduced by the fix of CVE-2019-20044
[5.5.1-7]
- drop privileges securely when unsetting PRIVILEGED option (CVE-2019-20044)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | zsh | 0:5.5.1-9.el8 |
| Oracle Linux · 8 | zsh-html | 0:5.5.1-9.el8 |
Vulnerabilities 1
-
Unscored —
In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demo…