< back to search

gpp_maybe Security update for zsh

SUSE-SLE-SERVER-12-SP5-2022-161

This update for zsh fixes the following issues: - CVE-2018-0502: Fixed execve call vulnerability to program named on the second line when the beginning of a #! script file was mishandled. (bsc#1107296, bsc#1107294) - CVE-2018-13259: Fixed execve call vulnerability to program name that is a substring of the intended one. (bsc#1107296, bsc#1107294)

Release Date

Jan 24 2022
References

Bugzilla: 1107294, 1107296
CVEs: CVE-2018-0502, CVE-2018-13259
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Server 12.5 aarch64

Packages

zsh
Shell with comprehensive completion

5.0.5-6.12.2 lock rpm lock src

5.0.5-6.12.2 lock rpm lock src

SUSE Linux Enterprise Server 12.5 x86_64

Packages

zsh
Shell with comprehensive completion

5.0.5-6.12.2 lock rpm lock src

SUSE Linux Enterprise Server 12.5 ppc64le

Packages

zsh
Shell with comprehensive completion

5.0.5-6.12.2 lock rpm lock src

SUSE Linux Enterprise Server 12.5 s390x

Packages

zsh
Shell with comprehensive completion

5.0.5-6.12.2 lock rpm lock src