SUSE-SU-2018:2686-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2018:2686-1

Related

Published

2018-09-11T13:00:06Z

Modified

2018-09-11T13:00:06Z

Summary

Security update for zsh

Details

This update for zsh to version 5.6 fixes the following security issues:

CVE-2018-0502: The beginning of a #! script file was mishandled, potentially leading to an execve call to a program named on the second line (bsc#1107296).
CVE-2018-13259: Shebang lines exceeding 64 characters were truncated, potentially leading to an execve call to a program name that is a substring of the intended one (bsc#1107294).

References

Affected packages

Name: zsh
Purl: pkg:rpm/suse/zsh&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.6-3.6.1

{
    "binaries": [
        {
            "zsh": "5.6-3.6.1"
        }
    ]
}