SUSE CVE-2018-0502

An issue was discovered in zsh before 5.6. The beginning of a ! script file was mishandled, potentially leading to an execve call to a program named on the second line...

The vulnerability of the UNIX command-line shell script processor Zsh, related to the lack of input validation mechanisms, allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the UNIX command-line shell script processor Zsh is related to the improper handling of scripts containing !. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

zsh security and bug fix update

5.0.2-33 - fix regression in oh-my-zsh vcsinfo hooks introduced in -30 1677696 5.0.2-32 - fix improper handling of shebang line longer than 64 bytes CVE-2018-13259...