Red Hat Security AdvisoryRHSA-2020:0892
zsh security update
Released 2020-03-18 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) zsh-4.3.11-11.el6_10
- Red Hat Enterprise Linux Desktop Optional (v. 6) zsh-html-4.3.11-11.el6_10
- Red Hat Enterprise Linux HPC Node (v. 6) zsh-4.3.11-11.el6_10
- Red Hat Enterprise Linux HPC Node Optional (v. 6) zsh-html-4.3.11-11.el6_10
- Red Hat Enterprise Linux Server (v. 6) zsh-4.3.11-11.el6_10
- Red Hat Enterprise Linux Server Optional (v. 6) zsh-html-4.3.11-11.el6_10
- Red Hat Enterprise Linux Workstation (v. 6) zsh-4.3.11-11.el6_10
- Red Hat Enterprise Linux Workstation Optional (v. 6) zsh-html-4.3.11-11.el6_10
Fixes 1 record
Priority LOW 35
In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00495 · Published 2020-02-24 · Partial fix CWE-273
