Red Hat Security AdvisoryRHSA-2020:0853
zsh security update
Released 2020-03-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) zsh-5.0.2-34.el7_7.2
- Red Hat Enterprise Linux Client Optional (v. 7) zsh-html-5.0.2-34.el7_7.2
- Red Hat Enterprise Linux ComputeNode (v. 7) zsh-5.0.2-34.el7_7.2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) zsh-html-5.0.2-34.el7_7.2
- Red Hat Enterprise Linux Server (v. 7) zsh-5.0.2-34.el7_7.2
- Red Hat Enterprise Linux Server Optional (v. 7) zsh-html-5.0.2-34.el7_7.2
- Red Hat Enterprise Linux Workstation (v. 7) zsh-5.0.2-34.el7_7.2
- Red Hat Enterprise Linux Workstation Optional (v. 7) zsh-html-5.0.2-34.el7_7.2
Fixes 1 record
Priority LOW 35
In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00495 · Published 2020-02-24 · Partial fix CWE-273
