CVE-2018-0502

An issue was discovered in zsh before 5.6. The beginning of a #! script file was mishandled, potentially leading to an execve call to a program named on the second line.

These are all security issues fixed in the zsh-5.8-7.7 package on the GA media of openSUSE Tumbleweed.

This update for zsh to version 5.6 fixes the following security issues:

• CVE-2018-0502: The beginning of a #! script file was mishandled, potentially leading to an execve call to a program named on the second line (bsc#1107296).
• CVE-2018-13259: Shebang lines exceeding 64 characters were truncated, potentially leading to an execve call to a program name that is a substring of the intended one (bsc#1107294).

This update for zsh fixes the following issues:

• CVE-2018-0502: Fixed execve call vulnerability to program named on the second line when the beginning of a #! script file was mishandled. (bsc#1107296, bsc#1107294)
• CVE-2018-13259: Fixed execve call vulnerability to program name that is a substring of the intended one. (bsc#1107296, bsc#1107294)

This update for zsh fixes the following issues:

• CVE-2019-20044: Fixed an insecure dropping of privileges when unsetting the PRIVILEGED option (bsc#1163882).
• CVE-2018-13259: Fixed an unexpected truncation of long shebang lines (bsc#1107294).
• CVE-2018-7549: Fixed a crash when an empty hash table (bsc#1082991).
• CVE-2018-1083: Fixed a stack-based buffer overflow when using tab completion on directories with long names (bsc#1087026).
• CVE-2018-1071: Fixed a stack-based buffer overflow when executing certain commands (bsc#1084656).
• CVE-2018-0502: Fixed a mishandling of shebang lines (bsc#1107296).
• CVE-2017-18206: Fixed a buffer overflow related to symlink processing (bsc#1083002).
• CVE-2017-18205: Fixed an application crash when using cd with no arguments (bsc#1082998).
• CVE-2016-10714: Fixed a potential application crash when handling maximum length paths (bsc#1083250).
• CVE-2014-10072: Fixed a buffer overflow when scanning very long directory paths for symbolic links (bsc#1082975).
• CVE-2014-10071: Fixed a buffer overflow when redirecting output to a long file descriptor (bsc#1082977).
• CVE-2014-10070: Fixed a privilege escalation vulnerability via environment variables (bsc#1082885).

It was discovered that Zsh incorrectly handled certain scripts. An attacker could possibly use this issue to execute arbitrary code. (CVE-2018-0502, CVE-2018-13259)

Richard Maciel Costa discovered that Zsh incorrectly handled certain scripts. An attacker could possibly use this issue to execute arbitrary code. (CVE-2018-1100)