{"id":"CVE-2021-45444","aliases":["ALPINE-CVE-2021-45444","ALSA-2022:2120","AZL-8586","CLSA-2022-1648138003","CLSA-2022-1648567648","CLSA-2022-1648567705","DEBIAN-CVE-2021-45444","DLA-2926-1","DSA-5078-1","EUVD-2021-32215","GHSA-735j-r9q6-48mw","MGASA-2022-0073","OESA-2022-1567","OESA-2022-2094","RHSA-2022:2120","RLSA-2022:2120","SUSE-SU-2022:0732-1","SUSE-SU-2022:0733-1","SUSE-SU-2022:0735-1","UBUNTU-CVE-2021-45444","USN-5325-1","openSUSE-SU-2022:0735-1","openSUSE-SU-2024:11959-1"],"status":"published","title":"In zsh before 5.8.1, an attacker can achieve code execution if they control a command output...","description":"In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument. This occurs because of recursive PROMPT_SUBST expansion.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.0198,"percentile":0.80809,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2022-02-13T05:32:21Z","modified":"2026-10-29T11:01:05Z","fixes":[{"ecosystem":"Alpine:v3.12","package":"zsh","fixed_in":["5.8.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"zsh","fixed_in":["5.8.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"zsh","fixed_in":["5.8.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"zsh","fixed_in":["5.8.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"zsh","fixed_in":["5.8.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"zsh","fixed_in":["5.8.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"zsh","fixed_in":["5.8.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"zsh","fixed_in":["5.8.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"zsh","fixed_in":["5.8.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"zsh","fixed_in":["5.8.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"zsh","fixed_in":["5.8.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"zsh","fixed_in":["5.8.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"zsh","fixed_in":["5.8.1-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"zsh","fixed_in":["5.5.1-9.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"zsh-html","fixed_in":["5.5.1-9.el8"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"zsh","fixed_in":["5.9-1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"zsh","fixed_in":["5.5.1-6.el8.2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"zsh-html","fixed_in":["5.5.1-6.el8.2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"zsh","fixed_in":["5.5.1-6.el8.2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"zsh-html","fixed_in":["5.5.1-6.el8.2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"zsh","fixed_in":["5.8.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"zsh","fixed_in":["5.8.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"zsh","fixed_in":["5.8.1-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"zsh","fixed_in":["5.3.1-4+deb9u5"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"zsh","fixed_in":["5.7.1-1+deb10u1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"zsh","fixed_in":["5.8-6+deb11u1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"zsh","fixed_in":["5.8.1-1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"zsh","fixed_in":["5.7.1-6.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"zsh","fixed_in":["5.7.1-6.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"zsh","fixed_in":["5.7.1-6.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"zsh","fixed_in":["5.8-3.oe2203"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"zsh-html","fixed_in":["0:5.5.1-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"zsh","fixed_in":["0:5.5.1-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"zsh-debuginfo","fixed_in":["0:5.5.1-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"zsh-debugsource","fixed_in":["0:5.5.1-9.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"zsh","fixed_in":["0:5.5.1-9.el8"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"zsh","fixed_in":["5.1.1-1ubuntu2.3+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"zsh","fixed_in":["5.4.2-3ubuntu3.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"zsh","fixed_in":["5.8-3ubuntu1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"zsh","fixed_in":["5.8.1-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.1-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.1-9.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"zsh-html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.1-9.el8"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1-1ubuntu2.3+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"zsh-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1-1ubuntu2.3+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"zsh-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1-1ubuntu2.3+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"zsh-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1-1ubuntu2.3+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"zsh-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1-1ubuntu2.3+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.1-6.el8.2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"zsh-html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.1-6.el8.2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.1-6.el8.2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"zsh-html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.1-6.el8.2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.1-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.1-4+deb9u5"}]}],"versions":["5.3.1-4","5.3.1-4+deb9u1","5.3.1-4+deb9u2","5.3.1-4+deb9u3","5.3.1-4+deb9u4"]},{"source":"osv","ecosystem":"Debian:10","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.1-1+deb10u1"}]}],"versions":["5.7.1-1"]},{"source":"osv","ecosystem":"Debian:11","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-6+deb11u1"}]}],"versions":["5.8-6"]},{"source":"osv","ecosystem":"Mageia:8","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.1-1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.1-6.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.1-6.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.1-6.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-3.oe2203"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"zsh-html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.1-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.1-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"zsh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.1-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"zsh-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.1-9.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.1-9.el8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-3.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-3.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-3.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-3.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-6.19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-6.19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-6.19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-6.19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-6.19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-6.19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-6.19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-6.19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-6.19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-6.19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-6.19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-6.19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-6.19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1-1ubuntu2.3+esm1"}]}],"versions":["5.1.1-1ubuntu1","5.1.1-1ubuntu2","5.1.1-1ubuntu2.1","5.1.1-1ubuntu2.2","5.1.1-1ubuntu2.3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2-3ubuntu3.2"}]}],"versions":["5.2-5ubuntu1","5.4.2-3ubuntu1","5.4.2-3ubuntu2","5.4.2-3ubuntu3","5.4.2-3ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-3ubuntu1.1"}]}],"versions":["5.7.1-1ubuntu2","5.8-2ubuntu2","5.8-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8-6build1","5.8-10","5.8.1-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1-1ubuntu2.3+esm1"}]}],"versions":["5.1.1-1ubuntu1","5.1.1-1ubuntu2","5.1.1-1ubuntu2.1","5.1.1-1ubuntu2.2","5.1.1-1ubuntu2.3"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2-3ubuntu3.2"}]}],"versions":["5.2-5ubuntu1","5.4.2-3ubuntu1","5.4.2-3ubuntu2","5.4.2-3ubuntu3","5.4.2-3ubuntu3.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-3ubuntu1.1"}]}],"versions":["5.7.1-1ubuntu2","5.8-2ubuntu2","5.8-3ubuntu1"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.1-1.1"}]}]}],"products":[{"vendor":"apple","product":"mac_os_x"},{"vendor":"apple","product":"macos"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"zsh","product":"zsh"}],"references":[{"url":"https://zsh.sourceforge.io/releases.html","tags":["x_refsource_MISC","x_transferred","Release Notes","Third Party Advisory","advisory"]},{"url":"https://vuln.ryotak.me/advisories/63","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2P3LPMGENEHKDWFO4MWMZSZL6G7Y4CV7/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://www.debian.org/security/2022/dsa-5078","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00020.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BWF3EXNBX5SVFDBL4ZFOD4GJBWFUKWN4/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://support.apple.com/kb/HT213257","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/kb/HT213256","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/kb/HT213255","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2022/May/33","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2022/May/35","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2022/May/38","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-45444","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2P3LPMGENEHKDWFO4MWMZSZL6G7Y4CV7/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BWF3EXNBX5SVFDBL4ZFOD4GJBWFUKWN4/"},{"url":"https://github.com/advisories/GHSA-735j-r9q6-48mw"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-45444","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-2120.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2021-45444","tags":["report"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2022-1648138003","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2022-1648567648.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2022-1648567705.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-45444","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0073.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30057","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/2P3LPMGENEHKDWFO4MWMZSZL6G7Y4CV7/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1567","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2094","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:2120","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.6_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2054089","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_2120.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-45444","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-45444","tags":["advisory","report"]},{"url":"https://www.zsh.org/mla/announce/msg00133.html","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2022:2120","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220732-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1163882","tags":["report"]},{"url":"https://bugzilla.suse.com/1196435","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-45444","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220733-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1089030","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1100","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220735-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-45444","tags":["report"]},{"url":"https://sourceforge.net/p/zsh/code/ci/c187154f47697cdbf822c2f9d714d570ed4a0fd1/","tags":["report"]},{"url":"https://sourceforge.net/p/zsh/code/ci/fdb8b0ce6244ff26bf55e0fd825310a58d0d3156/","tags":["report"]},{"url":"https://sourceforge.net/p/zsh/code/ci/bdc4d70a7e033b754e68a8659a037ea0fc5f38de/","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5325-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-20044","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BYQO6XCA5HFPKOF2ANXLGSZGFT63LHPA/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-45444","description":"In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument. This occurs because of recursive PROMPT_SUBST expansion.","status":"published","published":"2022-02-13T05:32:21Z","modified":"2024-08-04T04:39:20.752Z","updated_at":"2026-11-02T14:33:02.580561Z"}],"euvd":[{"id":"EUVD-2021-32215","description":"In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument. This occurs because of recursive PROMPT_SUBST expansion.","status":"published","published":"2022-02-13T05:32:21Z","modified":"2024-08-04T04:39:20Z","updated_at":"2026-11-03T03:08:27.448176Z"}],"ghsa":[{"id":"GHSA-735j-r9q6-48mw","title":"In zsh before 5.8.1, an attacker can achieve code execution if they control a command output...","description":"In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument. This occurs because of recursive PROMPT_SUBST expansion.","status":"published","published":"2022-02-15T00:02:48Z","modified":"2023-02-03T05:06:03Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:53:50.284505Z"}],"nvd":[{"id":"CVE-2021-45444","description":"In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument. This occurs because of recursive PROMPT_SUBST expansion.","status":"published","published":"2022-02-14T12:15:15.75Z","modified":"2026-06-17T04:13:22.823Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5.1,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:07:04.6896Z"}],"osv":[{"id":"ALPINE-CVE-2021-45444","description":"In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument. This occurs because of recursive PROMPT_SUBST expansion.","status":"published","published":"2022-02-14T12:15:15.75Z","modified":"2026-10-23T17:17:56.229196552Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:48.646074Z"},{"id":"AZL-8586","title":"CVE-2021-45444 affecting package zsh for versions less than 5.9-1","description":"In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument. This occurs because of recursive PROMPT_SUBST expansion.","status":"published","published":"2022-02-14T12:15:15Z","modified":"2026-04-21T04:34:51.96995Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:10.677811Z"},{"id":"CVE-2021-45444","description":"In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument. This occurs because of recursive PROMPT_SUBST expansion.","status":"published","published":"2022-02-14T12:15:15.75Z","modified":"2026-10-24T10:30:44.883370326Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:22.18434Z"},{"id":"DEBIAN-CVE-2021-45444","description":"In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument. This occurs because of recursive PROMPT_SUBST expansion.","status":"published","published":"2022-02-14T12:15:15.75Z","modified":"2026-10-23T18:04:56.888554637Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:35.799676Z"},{"id":"OESA-2022-1567","title":"zsh security update","description":"The zsh is a shell designed for interactive use, and it is also a powerful scripting language. Many of the useful features of bash, ksh, and tcsh were incorporated into zsh. It can match files by file extension without running an external program, share command history with any shell, and more.\r\n\r\nSecurity Fix(es):\r\n\r\nIn zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument. This occurs because of recursive PROMPT_SUBST expansion.(CVE-2021-45444)","status":"published","published":"2022-03-12T11:04:50Z","modified":"2026-08-18T01:15:43.323077327Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"OESA-2022-2094","title":"zsh security update","description":"The zsh is a shell designed for interactive use, and it is also a powerful scripting language. Many of the useful features of bash, ksh, and tcsh were incorporated into zsh. It can match files by file extension without running an external program, share command history with any shell, and more.\r\n\r\nSecurity Fix(es):\r\n\r\nIn zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument. This occurs because of recursive PROMPT_SUBST expansion.(CVE-2021-45444)","status":"published","published":"2022-11-11T11:05:24Z","modified":"2026-08-18T01:17:26.804545853Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"RHSA-2022:2120","title":"Red Hat Security Advisory: zsh security update","status":"published","published":"2024-09-16T07:29:32Z","modified":"2026-06-26T12:22:10.084510553Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RLSA-2022:2120","title":"Moderate: zsh security update","description":"The zsh shell is a command interpreter usable as an interactive login shell and as a shell script command processor. Zsh resembles the ksh shell (the Korn shell), but includes many enhancements. Zsh supports command-line editing, built-in spelling correction, programmable command completion, shell functions (with autoloading), a history mechanism, and more.\n\nSecurity Fix(es):\n\n* zsh: Prompt expansion vulnerability (CVE-2021-45444)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.6 Release Notes linked from the References section.","status":"published","published":"2022-05-10T06:56:22Z","modified":"2026-02-05T13:15:14.265736Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2021-45444","description":"In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument. This occurs because of recursive PROMPT_SUBST expansion.","status":"published","published":"2022-02-14T12:15:00Z","modified":"2026-04-22T13:03:39.517396Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:30.277322Z"},{"id":"ALSA-2022:2120","title":"Moderate: zsh security update","description":"The zsh shell is a command interpreter usable as an interactive login shell and as a shell script command processor. Zsh resembles the ksh shell (the Korn shell), but includes many enhancements. Zsh supports command-line editing, built-in spelling correction, programmable command completion, shell functions (with autoloading), a history mechanism, and more.\n\nSecurity Fix(es):\n\n* zsh: Prompt expansion vulnerability (CVE-2021-45444)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-05-10T06:56:22Z","modified":"2026-10-29T11:01:05.791829675Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"CLSA-2022-1648138003","title":"Fix CVE(s): CVE-2019-20044, CVE-2021-45444","description":"\n   * SECURITY UPDATE: Regain dropped privileges\n     - debian/patches/CVE-2019-20044-pre.patch: change the order of the calls to\n       setgid (this should go first) and setuid in Src/options.c.\n     - debian/patches/CVE-2019-20044-1.patch: add extra checks to drop privileges\n       securely in Src/options.c.\n     - debian/patches/CVE-2019-20044-2.patch: add Src/openssh_bsd_setres_id.c\n       and its object file to Src/zsh.mdd, fix some of the checks from the\n       previous patch in Src/options.c, update compatibility wrappers in\n       Src/zsh_system.h, update the uid/gid methods in AC_CHECK_FUNCS in\n       configure.ac and add a test in Test/E01options.ztst.\n     - debian/patches/CVE-2019-20044-3.patch: improve Src/options.c changes from\n       above two patches.\n     - debian/patches/CVE-2019-20044-4.patch: clean up white spaces in\n       Src/options.c.\n     - debian/patches/CVE-2019-20044-5.patch: add privileged tests to\n       Test/P01privileged.ztst, remove the notes on privileged test in\n       Test/E01options.ztst and add the prilived tests to the Test/README.\n     - CVE-2019-20044\n   * SECURITY UPDATE: Arbitrary code execution\n     - debian/patches/CVE-2021-45444.patch: save PROMPTSUBST option before\n       the call to promptexpand() in b/Src/prompt.c and restore after it is\n       executed.\n     - CVE-2021-45444","status":"published","published":"2022-03-24T16:06:43Z","modified":"2026-06-04T10:03:48.315303Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2022-1648567648","title":"Fix of CVE: CVE-2021-45444","description":"- CVE-2021-45444: do not expand PROMPT_SUBST within argument of prompt-expansion sequences such as file.file to avoid arbitrary code execution","status":"published","published":"2022-03-29T15:27:28Z","modified":"2026-06-01T00:33:13.43634049Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2022-1648567705","title":"Fix of CVE: CVE-2021-45444","description":"- CVE-2021-45444: do not expand PROMPT_SUBST within argument of prompt-expansion sequences such as file.file to avoid arbitrary code execution","status":"published","published":"2022-03-29T15:28:25Z","modified":"2026-06-01T00:33:19.18698234Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"DLA-2926-1","title":"zsh - security update","status":"published","published":"2022-02-18T00:00:00Z","modified":"2026-03-09T01:21:01.007939Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-5078-1","title":"zsh - security update","status":"published","published":"2022-02-16T00:00:00Z","modified":"2026-03-09T02:11:08.450918Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2022-0073","title":"Updated zsh packages fix security vulnerability","description":"In zsh before 5.8.1, an attacker can achieve code execution if they control\na command output inside the prompt, as demonstrated by a %F argument. This\noccurs because of recursive PROMPT_SUBST expansion. (CVE-2021-45444)\n","status":"published","published":"2022-02-18T00:14:24Z","modified":"2026-04-16T04:42:35.000883003Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2022:0735-1","title":"Security update for zsh","description":"This update for zsh fixes the following issues:\n\n- CVE-2021-45444: Fixed a vulnerability where arbitrary shell commands could be \n  executed related to prompt expansion (bsc#1196435).\n- CVE-2019-20044: Fixed a vulnerability where shell privileges would not be\n  properly dropped when unsetting the PRIVILEGED option (bsc#1163882).\n","status":"published","published":"2022-03-04T13:50:08Z","modified":"2026-02-04T04:40:49.687641Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:11959-1","title":"zsh-5.8.1-1.1 on GA media","description":"These are all security issues fixed in the zsh-5.8.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:48:09.400726Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"SUSE-SU-2022:0732-1","title":"Security update for zsh","description":"This update for zsh fixes the following issues:\n\n- CVE-2021-45444: Fixed a vulnerability where arbitrary shell commands could be \n  executed related to prompt expansion (bsc#1196435).\n- CVE-2019-20044: Fixed a vulnerability where shell privileges would not be\n  properly dropped when unsetting the PRIVILEGED option (bsc#1163882).\n","status":"published","published":"2022-03-04T13:47:38Z","modified":"2026-02-04T04:30:34.327672Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0733-1","title":"Security update for zsh","description":"This update for zsh fixes the following issues:\n\n- CVE-2021-45444: Fixed a vulnerability where arbitrary shell commands could be \n  executed related to prompt expansion (bsc#1196435).\n- CVE-2019-20044: Fixed a vulnerability where shell privileges would not be\n  properly dropped when unsetting the PRIVILEGED option (bsc#1163882).\n- CVE-2018-1100: Fixed a potential code execution via a stack-based buffer\n  overflow in utils.c:checkmailpath() (bsc#1089030).\n","status":"published","published":"2022-03-04T13:48:03Z","modified":"2026-02-04T03:43:56.312149Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0735-1","title":"Security update for zsh","description":"This update for zsh fixes the following issues:\n\n- CVE-2021-45444: Fixed a vulnerability where arbitrary shell commands could be \n  executed related to prompt expansion (bsc#1196435).\n- CVE-2019-20044: Fixed a vulnerability where shell privileges would not be\n  properly dropped when unsetting the PRIVILEGED option (bsc#1163882).\n","status":"published","published":"2022-03-04T13:51:25Z","modified":"2026-02-04T03:20:16.747552Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"USN-5325-1","title":"zsh vulnerabilities","description":"Sam Foxman discovered that Zsh incorrectly handled certain inputs.\nAn attacker could possibly use this issue to regain dropped privileges.\n(CVE-2019-20044)\n\nIt was discovered that Zsh incorrectly handled certain inputs.\nAn attacker could possibly use this issue to execute arbitrary code.\n(CVE-2021-45444)\n","status":"published","published":"2022-03-14T17:30:22Z","modified":"2026-06-25T13:31:03.330017772Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}