FEDORA-2018-ac1d9c2777 — security update for zsh

stable

zsh-5.4.1-3.fc27

FEDORA-2018-ac1d9c2777 created by kdudka 6 years ago for Fedora 27

fix stack-based buffer overflow in utils.c:checkmailpath() (CVE-2018-1100)
fix stack-based buffer overflow in gen_matches_files() (CVE-2018-1083)
fix stack-based buffer overflow in exec.c:hashcmd() (CVE-2018-1071)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2018-ac1d9c2777

This update has been submitted for testing by kdudka.

6 years ago

This update has been pushed to testing.

6 years ago

mhayden commented & provided feedback 6 years ago

karma

Works for me.

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

6 years ago

kdudka commented 6 years ago

Thanks for feedback!

This update has been submitted for batched by kdudka.

6 years ago

This update has been submitted for stable by bodhi.

6 years ago

This update has been pushed to stable.

6 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

6 years ago

in testing

6 years ago

in stable

6 years ago

Builds

zsh-5.4.1-3.fc27

BZ#1553533 CVE-2018-1071 zsh: Stack-based buffer overflow in exec.c:hashcmd() [fedora-all]

BZ#1560696 CVE-2018-1083 zsh: Stack-based buffer overflow in gen_matches_files() at compctl.c [fedora-all]

BZ#1563396 CVE-2018-1100 zsh: buffer overflow in utils.c:checkmailpath() can lead to local arbitrary code execution [fedora-all]

zsh-5.4.1-3.fc27

Automated Test Results

passed