SUSE-SU-2022:14910-1: important: Security update for zsh

sle-security-updates at sle-security-updates at
Mon Mar 14 20:19:29 UTC 2022

   SUSE Security Update: Security update for zsh

Announcement ID:    SUSE-SU-2022:14910-1
Rating:             important
References:         #1082885 #1082975 #1082977 #1082991 #1082998 
                    #1083002 #1083250 #1084656 #1087026 #1107294 
                    #1107296 #1163882 
Cross-References:   CVE-2014-10070 CVE-2014-10071 CVE-2014-10072
                    CVE-2016-10714 CVE-2017-18205 CVE-2017-18206
                    CVE-2018-0502 CVE-2018-1071 CVE-2018-1083
                    CVE-2018-13259 CVE-2018-7549 CVE-2019-20044
CVSS scores:
                    CVE-2014-10070 (SUSE): 8.6 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
                    CVE-2014-10071 (NVD) : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
                    CVE-2014-10071 (SUSE): 5.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
                    CVE-2014-10072 (SUSE): 5.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
                    CVE-2016-10714 (NVD) : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
                    CVE-2016-10714 (SUSE): 5.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
                    CVE-2017-18205 (NVD) : 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
                    CVE-2017-18205 (SUSE): 2.5 CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
                    CVE-2017-18206 (NVD) : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
                    CVE-2017-18206 (SUSE): 5.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
                    CVE-2018-0502 (NVD) : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
                    CVE-2018-0502 (SUSE): 7.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
                    CVE-2018-1071 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
                    CVE-2018-1071 (SUSE): 3.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
                    CVE-2018-1083 (NVD) : 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
                    CVE-2018-1083 (SUSE): 7.5 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
                    CVE-2018-13259 (NVD) : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
                    CVE-2018-13259 (SUSE): 7.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
                    CVE-2018-7549 (NVD) : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
                    CVE-2018-7549 (SUSE): 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
                    CVE-2019-20044 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
                    CVE-2019-20044 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products:
                    SUSE Linux Enterprise Debuginfo 11-SP3
                    SUSE Linux Enterprise Debuginfo 11-SP4
                    SUSE Linux Enterprise Point of Sale 11-SP3
                    SUSE Linux Enterprise Server 11-SP4-LTSS

   An update that fixes 12 vulnerabilities is now available.


   This update for zsh fixes the following issues:

   - CVE-2019-20044: Fixed an insecure dropping of privileges when unsetting
     the PRIVILEGED option (bsc#1163882).
   - CVE-2018-13259: Fixed an unexpected truncation of long shebang lines
   - CVE-2018-7549: Fixed a crash when an empty hash table (bsc#1082991).
   - CVE-2018-1083: Fixed a stack-based buffer overflow when using tab
     on directories with long names (bsc#1087026).
   - CVE-2018-1071: Fixed a stack-based buffer overflow when executing
     certain commands (bsc#1084656).
   - CVE-2018-0502: Fixed a mishandling of shebang lines (bsc#1107296).
   - CVE-2017-18206: Fixed a buffer overflow related to symlink processing
   - CVE-2017-18205: Fixed an application crash when using cd with no
     arguments (bsc#1082998).
   - CVE-2016-10714: Fixed a potential application crash when handling
     maximum length paths (bsc#1083250).
   - CVE-2014-10072: Fixed a buffer overflow when scanning very long
     directory paths for symbolic links (bsc#1082975).
   - CVE-2014-10071: Fixed a buffer overflow when redirecting output to a
     long file descriptor (bsc#1082977).
   - CVE-2014-10070: Fixed a privilege escalation vulnerability via
     environment variables (bsc#1082885).

Patch Instructions:

   To install this SUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Server 11-SP4-LTSS:

      zypper in -t patch slessp4-zsh-14910=1

   - SUSE Linux Enterprise Point of Sale 11-SP3:

      zypper in -t patch sleposp3-zsh-14910=1

   - SUSE Linux Enterprise Debuginfo 11-SP4:

      zypper in -t patch dbgsp4-zsh-14910=1

   - SUSE Linux Enterprise Debuginfo 11-SP3:

      zypper in -t patch dbgsp3-zsh-14910=1

Package List:

   - SUSE Linux Enterprise Server 11-SP4-LTSS (i586 ppc64 s390x x86_64):


   - SUSE Linux Enterprise Point of Sale 11-SP3 (i586):


   - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ppc64 s390x x86_64):


   - SUSE Linux Enterprise Debuginfo 11-SP3 (i586 s390x x86_64):



More information about the sle-security-updates mailing list