Red Hat Security Advisory

RHSA-2020:0903

zsh security update

Released 2020-03-19 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2019-14464 CVE-2019-20044 · GHSA-gwf9-995r-26hx

LOW 35

In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00495 Published 2020-02-24 Partial fix CWE-273