Important Photon OS Security Update - PHSA-2020-3.0-0073

Updates of 'bluez', 'zsh', 'linux-aws', 'linux', 'linux-secure', 'linux-esx', 'python3', 'python2' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0222

An update of 'zsh', 'envoy' packages of Photon OS has been released...

Important Photon OS Security Update - PHSA-2020-0073

Updates of 'bluez', 'python3', 'python2', 'zsh', 'linux-esx', 'linux', 'linux-secure', 'linux-aws' packages of Photon OS have been released...

Important: Red Hat Security Advisory: zsh security update

An update for zsh is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

zsh: insecure dropping of privileges when unsetting PRIVILEGED option

A flaw was found in zsh. When unsetting the PRIVILEGED option, the shell sets its effective user and group IDs to match their respective real IDs. When the RUID and EUID were both non-zero, it is possible to regain the shell's former privileges. Also, the setopt built-in did not correctly report...

CentOS 6 : zsh (RHSA-2020:0892)

The remote CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0892 advisory. - In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so th...

CentOS 7 : zsh (RHSA-2020:0853)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0853 advisory. - In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so th...

GLSA-202003-55 : Zsh: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-202003-55 Zsh: Privilege escalation It was discovered that Zsh was insecure dropping privileges when unsetting PRIVILEGED option. Impact : An attacker could escalate privileges. Workaround : There is no known workaround at this...

RHEL 8 : zsh (RHSA-2020:0978)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0978 advisory. The zsh shell is a command interpreter usable as an interactive login shell and as a shell script command processor. Zsh resembles the ksh shell the...

CentOS: Security Advisory for zsh (CESA-2020:0853)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS: Security Advisory for zsh (CESA-2020:0892)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

zsh security update

CentOS Errata and Security Advisory CESA-2020:0892 An update for zsh is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

zsh security update

CentOS Errata and Security Advisory CESA-2020:0853 An update for zsh is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Zsh: Privilege escalation

Background A shell designed for interactive use, although it is also a powerful scripting language. Description It was discovered that Zsh was insecure dropping privileges when unsetting PRIVILEGED option. Impact An attacker could escalate privileges. Workaround There is no known workaround at th...

Huawei EulerOS: Security Advisory for zsh (EulerOS-SA-2020-1329)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 8 : zsh (RHSA-2020:0903)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0903 advisory. The zsh shell is a command interpreter usable as an interactive login shell and as a shell script command processor. Zsh resembles the ksh shell the...

EulerOS 2.0 SP5 : zsh (EulerOS-SA-2020-1329)

According to the version of the zsh package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid...

Oracle Linux 6 : zsh (ELSA-2020-0892)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-0892 advisory. - improve printing of error messages introduced by the fix of CVE-2019-20044 Tenable has extracted the preceding description block directly from the Oracle Linu...

zsh: insecure dropping of privileges when unsetting PRIVILEGED option

A flaw was found in zsh. When unsetting the PRIVILEGED option, the shell sets its effective user and group IDs to match their respective real IDs. When the RUID and EUID were both non-zero, it is possible to regain the shell's former privileges. Also, the setopt built-in did not correctly report...

Important: Red Hat Security Advisory: zsh security update

An update for zsh is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...