This update for zsh fixes the following issues :

  - CVE-2014-10070: environment variable injection could     lead to local privilege escalation (bnc#1082885)

  - CVE-2014-10071: buffer overflow in exec.c could lead to     denial of service. (bnc#1082977)

  - CVE-2014-10072: buffer overflow In utils.c when scanning     very long directory paths for symbolic links.
    (bnc#1082975)

  - CVE-2016-10714: In zsh before 5.3, an off-by-one error     resulted in undersized buffers that were intended to     support PATH_MAX characters. (bnc#1083250)

  - CVE-2017-18205: In builtin.c when sh compatibility mode     is used, a NULL pointer dereference could lead to denial     of service (bnc#1082998)

  - CVE-2018-1071: exec.c:hashcmd() function vulnerability     could lead to denial of service. (bnc#1084656)

  - CVE-2018-1083: Autocomplete vulnerability could lead to     privilege escalation. (bnc#1087026)

  - CVE-2018-7549: In params.c in zsh through 5.4.2, there     is a crash during a copy of an empty hash table, as     demonstrated by typeset -p. (bnc#1082991)

  - CVE-2017-18206: buffer overrun in xsymlinks could lead     to denial of service (bnc#1083002)

  - Autocomplete and REPORTTIME broken (bsc#896914)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Detections

Analytics

SUSE SLED12 / SLES12 Security Update : zsh (SUSE-SU-2018:1072-1)

critical Nessus Plugin ID 109355

Version 1.4